check if return_to matches realm

Signed-off-by: Michael Krelin <hacker@klever.net>

1 files changed, 9 insertions, 0 deletions

diff --git a/include/opkele/exception.h b/include/opkele/exception.h
index 5c8418e..33f89cc 100644
--- a/include/opkele/exception.h
+++ b/include/opkele/exception.h
@@ -312,51 +312,60 @@ namespace opkele {
     };
 
     /**
      * thrown by associations store related functions in case of dumb RP.
      */
     class dumb_RP : public exception {
         public:
             dumb_RP(OPKELE_E_PARS)
                 : exception(OPKELE_E_CONS) { }
     };
 
     /**
      * thrown by endpoint-queue related function if endpoint is being
      * accessed but there's no endpoint available.
      */
     class no_endpoint : public exception {
         public:
             no_endpoint(OPKELE_E_PARS)
                 : exception(OPKELE_E_CONS) { }
     };
 
     /**
      * thrown while processing OpenID request in OP. Signifies invalid realm
      */
     class bad_realm : public exception {
         public:
             bad_realm(OPKELE_E_PARS)
                 : exception(OPKELE_E_CONS) { }
     };
 
     /**
      * thrown when attempting to retrieve return_to of one-way request
      */
     class no_return_to : public exception {
         public:
             no_return_to(OPKELE_E_PARS)
                 : exception(OPKELE_E_CONS) { }
     };
 
     /**
      * thrown when querying identity of non-identity related request
      */
     class non_identity : public exception {
         public:
             non_identity(OPKELE_E_PARS)
                 : exception(OPKELE_E_CONS) { }
     };
 
+    /**
+     * thrown if return_to URL doesn't match realm
+     */
+    class bad_return_to : public exception {
+        public:
+            bad_return_to(OPKELE_E_PARS)
+                : exception(OPKELE_E_CONS) { }
+    };
+
 }
 
 #endif /* __OPKELE_EXCEPTION_H */