ecrs-auth-core 1.0.113 → 1.0.115

package/dist/auth-customer.service.js

@@ -326,6 +326,7 @@ let AuthCustomerService = class AuthCustomerService {
     }
     async getCustomerIdBySubdomain(subdomain) {
         const rows = await this.userRepo.query(`SELECT customer_id FROM public.tbl_super_customer_ets_setup_details WHERE subdomain = $1 LIMIT 1`, [subdomain]);
+        console.log(`🔍 Subdomain "${subdomain}" → customer_id=${rows[0]?.customer_id ?? null}`);
         return rows[0]?.customer_id ?? null;
     }
     // In auth-customer.service.ts — add this new method

package/dist/jwt/jwt-customer.strategy.d.ts

@@ -4,6 +4,7 @@ declare const JwtCustomerStrategy_base: new (...args: any[]) => Strategy;
 export declare class JwtCustomerStrategy extends JwtCustomerStrategy_base {
     private readonly authCustomerService;
     constructor(authCustomerService: AuthCustomerService);
+    private extractSubdomain;
     validate(req: any, payload: any): Promise<{
         id: number;
         email: string;

package/dist/jwt/jwt-customer.strategy.js

@@ -24,11 +24,23 @@ let JwtCustomerStrategy = class JwtCustomerStrategy extends (0, passport_1.Passp
         });
         this.authCustomerService = authCustomerService;
     }
+    extractSubdomain(url) {
+        if (!url)
+            return null;
+        try {
+            const hostname = new URL(url).hostname; // e.g. "acme.ecrs.com"
+            const parts = hostname.split(".");
+            return parts.length > 2 ? parts[0] : null;
+        }
+        catch {
+            return null;
+        }
+    }
     async validate(req, payload) {
         // 1. Subdomain check against tbl_super_customer_ets_setup_details
-        const host = req.get("host") || "";
-        const hostParts = host.split(".");
-        const subdomain = hostParts.length > 2 ? hostParts[0] : null;
+        const origin = req.headers['origin'] || req.headers['referer'] || '';
+        const subdomain = this.extractSubdomain(origin);
+        console.log(`🔍 Validating JWT for subdomain: ${subdomain ?? "N/A"} (origin: ${origin || "N/A"})`);
         if (subdomain) {
             const customerId = await this.authCustomerService.getCustomerIdBySubdomain(subdomain);
             if (!customerId) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ecrs-auth-core",
-  "version": "1.0.113",
+  "version": "1.0.115",
   "description": "Centralized authentication and authorization module for ECRS apps",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",