ecr-viewer: set url.hostname to x-forwarded-host (#2630)

* set url.hostname to x-forwarded-host * add log statements
CDCgov · Sep 26, 2024 · 3527a8a · 3527a8a
1 parent 12e12be
commit 3527a8a
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/containers/ecr-viewer/src/middleware.ts b/containers/ecr-viewer/src/middleware.ts
@@ -48,10 +48,15 @@ export const config = {
  *   "auth" parameter does not exist in the request.
  */
 function set_auth_cookie(req: NextRequest) {
-  const url = req.nextUrl;
+  const url = req.nextUrl.clone();
   const auth = url.searchParams.get("auth");
+  console.log(url);
+  console.log("==========");
+  console.log(req);
+  console.log("------");
   if (auth) {
     url.searchParams.delete("auth");
+    url.hostname = req.headers.get("x-forwarded-host") ?? url.hostname;
     const response = NextResponse.redirect(url);
     response.cookies.set("auth-token", auth, { httpOnly: true });
     return response;