Fix relative URI resolution for acl:agent

melvincarvalho · melvincarvalho · commit bdbbbb7e04bc · 2026-01-07T13:18:55.000+01:00
Resolve agent URIs against the ACL URL so that relative references like `./#me` in an ACL file correctly match the authenticated WebID. Previously, `accessTo` and `default` were resolved but `agents` were not, causing 403 Forbidden when using relative URIs for agent WebIDs. Fixes JavaScriptSolidServer#64
diff --git a/src/wac/parser.js b/src/wac/parser.js
@@ -144,8 +144,9 @@ function parseAuthorization(node, aclUrl) {
   auth.default = parseUriArray(node['acl:default'] || node['default'])
     .map(uri => resolveUri(uri, baseUrl));
 
-  // Parse agents (WebIDs can be relative too)
-  auth.agents = parseUriArray(node['acl:agent'] || node['agent']);
+  // Parse agents (WebIDs can be relative too) - resolve against ACL URL
+  auth.agents = parseUriArray(node['acl:agent'] || node['agent'])
+    .map(uri => resolveUri(uri, aclUrl));
 
   // Parse agentClass
   auth.agentClasses = parseUriArray(node['acl:agentClass'] || node['agentClass']);
