From 82290285d015bdacfeaa01614937e8f7abbb63f0 Mon Sep 17 00:00:00 2001
From: Marcos Rodrigues <marcos.rodrigues.dev@gmail.com>
Date: Wed, 3 Dec 2025 14:41:51 -0300
Subject: [PATCH] FIX: using header host

---
 src/modules/auth/auth.controller.ts |  6 +++---
 src/modules/auth/auth.service.ts    | 10 +++++-----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/src/modules/auth/auth.controller.ts b/src/modules/auth/auth.controller.ts
index c648a41..3d86f14 100644
--- a/src/modules/auth/auth.controller.ts
+++ b/src/modules/auth/auth.controller.ts
@@ -479,7 +479,7 @@ export class AuthController {
     const accessToken = req.cookies['ddf-auth'];
     const refreshToken = req.cookies['ddf-refresh-auth']; 
     const userId = req.cookies['ddf-user-id']; 
-    const resourceOrigin = req.headers["origin"]
+    const resourceHost = req.headers["host"]
 
     const hasUserSession = Boolean(accessToken) && Boolean(userId);
     this.logger.info('Has User Session: ' + hasUserSession);
@@ -489,7 +489,7 @@ export class AuthController {
     }
 
     try {
-      const userDto = await this.authClient.validateUserSession(accessToken, resourceOrigin);
+      const userDto = await this.authClient.validateUserSession(accessToken, resourceHost);
       return res.status(200).json(userDto);
     } catch (error) {
 
@@ -501,7 +501,7 @@ export class AuthController {
       const {
         authSession,
         user
-      } = await this.authClient.refreshUserSession(refreshToken, userId, resourceOrigin);
+      } = await this.authClient.refreshUserSession(refreshToken, userId, resourceHost);
       this.authClient.writeAuthSession(res, authSession);
       return res.status(200).json(user);
     }
diff --git a/src/modules/auth/auth.service.ts b/src/modules/auth/auth.service.ts
index 3133462..3229752 100644
--- a/src/modules/auth/auth.service.ts
+++ b/src/modules/auth/auth.service.ts
@@ -449,16 +449,16 @@ export class AuthClientService implements OnModuleInit {
     return userDto;
   }
 
-  private validateResourceAccess(origin: string, user: UserDTO) {
+  private validateResourceAccess(host: string, user: UserDTO) {
     this.logger.info(
       "Validate whether the source URL is a resource belonging to the user's client",
     );
-    this.logger.info('Origin: ' + origin);
+    this.logger.info('Host: ' + host);
     this.logger.info('Customer: ' + user.customer.name);
 
-    const urlParts = origin.replace('https://', '').split('.');
-    const domain = urlParts[0];
-    const isResouceStg = urlParts[1] === 'stg';
+    const hostParts = host.split('.');
+    const domain = hostParts[0];
+    const isResouceStg = hostParts[1] === 'stg';
 
     const domainParts = domain.split('-');
     const customerInDomain = domainParts[domainParts.length - 1];