extract domain from referer

adrien2p · Feb 12, 2024 · cbc39b9 · cbc39b9
1 parent d7d21c7
commit cbc39b9
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/packages/medusa-plugin-auth/src/core/passport/utils/auth-routes-builder.ts b/packages/medusa-plugin-auth/src/core/passport/utils/auth-routes-builder.ts
@@ -15,6 +15,11 @@ type PassportCallbackAuthenticateMiddlewareOptions = {
 	failureRedirect: string;
 };
 
+const extractDomain = (url) => {
+	const domain = url.match(/^(?:https|http?:\/\/)?(?:[^@\n]+@)?(?:www\.)?([^:\/\n]+)/im)[1];
+	return domain;
+};
+
 /**
  * Build and return a router including the different route and configuration for a passport strategy
  * @param domain
@@ -128,7 +133,7 @@ function successActionHandlerFactory(
 	const returnAccessToken = req.query.returnAccessToken == 'true';
 	const redirectUrl = (req.query.redirectTo ? req.query.redirectTo : defaultRedirect) as string;
 	const isProdOrStaging = process.env.NODE_ENV === 'production' || process.env.NODE_ENV === 'staging';
-	const originHost = isProdOrStaging ? req.get('referer') : undefined;
+	const originHost = isProdOrStaging ? req.get('referer') && extractDomain(req.get('referer')) : undefined;
 
 	if (returnAccessToken) {
 		return (req: Request, res: Response) => {