Function getFirstForwardedProtocol

src/node/orpc/server.ts:249–258

(req: OriginValidationRequest)

}

function getFirstForwardedProtocol(req: OriginValidationRequest): "http" | "https" | null {
  const forwardedProtoHeader = getFirstHeaderValue(req, "x-forwarded-proto");
  if (!forwardedProtoHeader) {
    return null;
  }

  // Trust the client-facing hop. Additional values come from downstream/internal hops.
  const firstHop = forwardedProtoHeader.split(",")[0] ?? "";
  return normalizeProtocol(firstHop);
}

function getOriginProtocolOnExpectedHost(req: OriginValidationRequest): "http" | "https" | null {
  const normalizedOrigin = normalizeOrigin(getFirstHeaderValue(req, "origin"));