From 5db043491820a7ffae44b690bf49b4a6bac331d4 Mon Sep 17 00:00:00 2001
From: "randy.pierce" <randy.pierce@noaa.gov>
Date: Wed, 11 Feb 2026 12:36:33 -0700
Subject: [PATCH] fix test for origin matching returnURL

---
 static/js/indexPage.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/static/js/indexPage.js b/static/js/indexPage.js
index 949df1c..860f0b2 100644
--- a/static/js/indexPage.js
+++ b/static/js/indexPage.js
@@ -115,7 +115,7 @@ async function logout() {
 
 async function authenticate() {
   if (!window.authenticatedRole) {
-    if (window.returnURL !== window.ROOT_PATH) {
+    if (!window.returnURL.startsWith(window.location.origin)) {
       const creds = await getPasswordModal();
       if (!window.vxFormsCredentials
         || !Object.values(window.vxFormsCredentials).includes(creds.password.toLowerCase())