ecrs-auth-core 1.0.114 → 1.0.116

package/dist/jwt/jwt-customer.strategy.d.ts

@@ -4,6 +4,7 @@ declare const JwtCustomerStrategy_base: new (...args: any[]) => Strategy;
 export declare class JwtCustomerStrategy extends JwtCustomerStrategy_base {
     private readonly authCustomerService;
     constructor(authCustomerService: AuthCustomerService);
+    private extractSubdomain;
     validate(req: any, payload: any): Promise<{
         id: number;
         email: string;

package/dist/jwt/jwt-customer.strategy.js

@@ -24,12 +24,27 @@ let JwtCustomerStrategy = class JwtCustomerStrategy extends (0, passport_1.Passp
         });
         this.authCustomerService = authCustomerService;
     }
+    extractSubdomain(url) {
+        if (!url)
+            return null;
+        try {
+            const hostname = new URL(url).hostname; // e.g. "acme.ecrs.com" or "wht.localhost"
+            const parts = hostname.split(".");
+            if (parts.length > 2)
+                return parts[0];
+            if (parts.length === 2 && parts[1] === "localhost")
+                return parts[0];
+            return null;
+        }
+        catch {
+            return null;
+        }
+    }
     async validate(req, payload) {
         // 1. Subdomain check against tbl_super_customer_ets_setup_details
-        const host = req.get("host") || "";
-        const hostParts = host.split(".");
-        const subdomain = hostParts.length > 2 ? hostParts[0] : null;
-        console.log(`🔍 Validating JWT for subdomain: ${subdomain ?? "N/A"}`);
+        const origin = req.headers['origin'] || req.headers['referer'] || '';
+        const subdomain = this.extractSubdomain(origin);
+        console.log(`🔍 Validating JWT for subdomain: ${subdomain ?? "N/A"} (origin: ${origin || "N/A"})`);
         if (subdomain) {
             const customerId = await this.authCustomerService.getCustomerIdBySubdomain(subdomain);
             if (!customerId) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ecrs-auth-core",
-  "version": "1.0.114",
+  "version": "1.0.116",
   "description": "Centralized authentication and authorization module for ECRS apps",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",