feature(api): support better wildcard

2024-09-23 09:36:02 +02:00
parent dce974512f
commit f2fb6379c6
1 changed files with 11 additions and 1 deletions
--- a/apps/api/src/utils/auth.ts
+++ b/apps/api/src/utils/auth.ts
@@ -75,7 +75,17 @@ export async function validateSdkRequest(

  if (client.cors) {
    const domainAllowed = client.cors.split(',').find((domain) => {
-      if (cleanDomain(domain) === cleanDomain(origin || '')) {
+      const cleanedDomain = cleanDomain(domain);
+      // support wildcard domains `*.foo.com`
+      if (cleanedDomain.includes('*')) {
+        const regex = new RegExp(
+          `${cleanedDomain.replaceAll('.', '\\.').replaceAll('*', '.+?')}`,
+        );
+
+        return regex.test(origin || '');
+      }
+
+      if (cleanedDomain === cleanDomain(origin || '')) {
        return true;
      }
    });