Use redirect helper (#22847)

Author: HaoK

src/Security/Authentication/Core/src/RemoteAuthenticationHandler.cs

@@ -276,7 +276,7 @@ protected virtual async Task<HandleRequestResult> HandleAccessDeniedErrorAsync(A
                 {
                     uri = QueryHelpers.AddQueryString(uri, context.ReturnUrlParameter, context.ReturnUrl);
                 }
-                Response.Redirect(uri);
+                Response.Redirect(BuildRedirectUri(uri));
 
                 return HandleRequestResult.Handle();
             }

src/Security/Authentication/test/GoogleTests.cs

@@ -417,7 +417,7 @@ public async Task ReplyPathWithAccessDeniedError_AllowsCustomizingPath()
             var transaction = await server.SendAsync("https://example.com/signin-google?error=access_denied&error_description=SoBad&error_uri=foobar&state=protected_state",
                 ".AspNetCore.Correlation.Google.correlationId=N");
             Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.Equal("/custom-denied-page?rurl=http%3A%2F%2Fwww.google.com%2F", transaction.Response.Headers.GetValues("Location").First());
+            Assert.Equal("https://example.com/custom-denied-page?rurl=http%3A%2F%2Fwww.google.com%2F", transaction.Response.Headers.GetValues("Location").First());
         }
 
         [Fact]

src/Security/Authentication/test/OAuthTests.cs

@@ -274,7 +274,7 @@ public async Task HandleRequestAsync_RedirectsToAccessDeniedPathWhenExplicitlySe
                 ".AspNetCore.Correlation.Weblie.correlationId=N");
 
             Assert.Equal(HttpStatusCode.Redirect, transaction.Response.StatusCode);
-            Assert.Equal("/access-denied?ReturnUrl=http%3A%2F%2Ftesthost%2Fredirect", transaction.Response.Headers.Location.ToString());
+            Assert.Equal("https://www.example.com/access-denied?ReturnUrl=http%3A%2F%2Ftesthost%2Fredirect", transaction.Response.Headers.Location.ToString());
         }
 
         [Fact]

src/Security/Authentication/test/TwitterTests.cs

@@ -211,7 +211,7 @@ public async Task HandleRequestAsync_RedirectsToAccessDeniedPathWhenExplicitlySe
             var response = await client.SendAsync(request);
 
             Assert.Equal(HttpStatusCode.Redirect, response.StatusCode);
-            Assert.Equal("/access-denied?ReturnUrl=%2Fchallenge", response.Headers.Location.ToString());
+            Assert.Equal("http://localhost/access-denied?ReturnUrl=%2Fchallenge", response.Headers.Location.ToString());
         }
 
         [Fact]