Archives/gristlabs_grist-core
1
0
Fork 0
mirror of https://github.com/gristlabs/grist-core.git synced 2024-10-27 20:44:07 +00:00
Code Issues Projects Releases Wiki Activity

requestUtils: add some logging to allowHost

Browse Source 
I found it useful during my work to figure out what was going on in
this function and why some requests were being denied.
This commit is contained in:
Jordi Gutiérrez Hermoso 2024-04-10 14:23:43 -04:00 committed by jordigh
parent 6f4637a8f0
commit 17ea97db78
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
app/server/lib/requestUtils.ts
View File

@ -103,6 +103,12 @@ export function allowHost(req: IncomingMessage, allowedHost: string|URL) {
const proto = getEndUserProtocol(req); const proto = getEndUserProtocol(req);
const actualUrl = new URL(getOriginUrl(req)); const actualUrl = new URL(getOriginUrl(req));
const allowedUrl = (typeof allowedHost === 'string') ? new URL(`${proto}://${allowedHost}`) : allowedHost; const allowedUrl = (typeof allowedHost === 'string') ? new URL(`${proto}://${allowedHost}`) : allowedHost;
log.rawDebug('allowHost: ', {
req: (new URL(req.url!, `http://${req.headers.host}`).href),
origin: req.headers.origin,
actualUrl: actualUrl.hostname,
allowedUrl: allowedUrl.hostname,
});
if ((req as RequestWithOrg).isCustomHost) { if ((req as RequestWithOrg).isCustomHost) {
// For a request to a custom domain, the full hostname must match. // For a request to a custom domain, the full hostname must match.
return actualUrl.hostname === allowedUrl.hostname; return actualUrl.hostname === allowedUrl.hostname;