ecrs-auth-core 1.0.117 → 1.0.118

package/dist/auth-customer.controller.d.ts

@@ -6,6 +6,7 @@ export declare class AuthCustomerController {
     private readonly authCustomerService;
     private readonly jwtService;
     constructor(authCustomerService: AuthCustomerService, jwtService: JwtService);
+    private extractSubdomain;
     login(request: Request, body: LoginCustomerDto): Promise<{
         status: boolean;
         message: string;

package/dist/auth-customer.controller.js

@@ -24,17 +24,28 @@ let AuthCustomerController = class AuthCustomerController {
         this.authCustomerService = authCustomerService;
         this.jwtService = jwtService;
     }
+    extractSubdomain(url) {
+        if (!url)
+            return null;
+        try {
+            const hostname = new URL(url).hostname; // e.g. "acme.ecrs.com" or "wht.localhost"
+            const parts = hostname.split(".");
+            if (parts.length > 2)
+                return parts[0];
+            if (parts.length === 2 && parts[1] === "localhost")
+                return parts[0];
+            return null;
+        }
+        catch {
+            return null;
+        }
+    }
     async login(request, body) {
         const clientIp = this.getClientIp(request);
         const userAgent = request.get("user-agent") || "Unknown";
         const additionalData = this.extractClientData(request, userAgent);
-        const host = request.get("host") || "";
-        const hostParts = host.split(".");
-        const subdomain = hostParts.length > 2
-            ? hostParts[0]
-            : hostParts.length === 2 && hostParts[1].split(":")[0] === "localhost"
-                ? hostParts[0]
-                : null;
+        const origin = request.get("origin") || request.get("referer") || "";
+        const subdomain = this.extractSubdomain(origin);
         console.log(`📍 Customer Emplyee login attempt from IP: ${clientIp}, User-Agent: ${userAgent}, subdomain: ${subdomain ?? "none"}`);
         const user = await this.authCustomerService.validateUser(body.email, body.password, clientIp, subdomain ?? undefined);
         if (!user) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ecrs-auth-core",
-  "version": "1.0.117",
+  "version": "1.0.118",
   "description": "Centralized authentication and authorization module for ECRS apps",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",