feat(deploy) : serve sudloh.com alongside guide.sudloh.com

2026-10-15 02:09:06 +07:00
parent 6acad81b05
commit e11dede099
11 changed files with 83 additions and 13 deletions
@@ -25,8 +25,11 @@ export function errorResponse(cause: unknown): Response {
 export function requireSameOrigin(request: Request) {
  const configured = process.env.BETTER_AUTH_URL;
  if (!configured) throw new HttpError(503, "origin-not-configured");
+  const allowedOrigins = [new URL(configured).origin, ...(
+    process.env.BETTER_AUTH_TRUSTED_ORIGINS?.split(",").map((value) => value.trim()).filter(Boolean) ?? []
+  )];
  const origin = request.headers.get("origin");
-  if (origin !== new URL(configured).origin || request.headers.get("sec-fetch-site") === "cross-site") {
+  if (!origin || !allowedOrigins.includes(origin) || request.headers.get("sec-fetch-site") === "cross-site") {
    throw new HttpError(403, "cross-origin-request");
  }
 }