Function browserOriginFromRequest

apps/cloud/src/auth/request-origin.ts:17–23

(request: Request)

//
// Pure (no `cloudflare:workers`) so it unit-tests without the worker runtime.
export const browserOriginFromRequest = (request: Request): string => {
  const url = new URL(request.url);
  const proto = request.headers.get("x-forwarded-proto")?.split(",")[0]?.trim();
  const host = request.headers.get("x-forwarded-host")?.split(",")[0]?.trim();
  if (!proto && !host) return url.origin;
  return `${proto || url.protocol.replace(":", "")}://${host || url.host}`;
};