Function getRequestPublicBasePath

src/node/orpc/server.ts:519–556

(
  req: PublicBasePathRequest,
  options: { allowReferer?: boolean } = {}
)

}

function getRequestPublicBasePath(
  req: PublicBasePathRequest,
  options: { allowReferer?: boolean } = {}
): string {
  const forwardedPrefix = normalizePublicBasePath(getFirstHeaderValue(req, "x-forwarded-prefix"));
  if (forwardedPrefix) {
    return forwardedPrefix;
  }

  for (const headerName of ["x-forwarded-uri", "x-original-uri", "x-original-url"] as const) {
    const headerBasePath = getAppProxyBasePathFromRequestValue(
      getFirstHeaderValue(req, headerName)
    );
    if (headerBasePath) {
      return headerBasePath;
    }
  }

  for (const requestValue of [req.originalUrl, req.url]) {
    const requestBasePath = getAppProxyBasePathFromRequestValue(requestValue);
    if (requestBasePath) {
      return requestBasePath;
    }
  }

  // Browser mode requests include Referer by default, so this keeps cookie scope
  // and generated app links aligned when a proxy strips the public prefix.
  if (options.allowReferer) {
    const refererBasePath = getAppProxyBasePathFromRequestValue(
      getFirstHeaderValue(req, "referer")
    );
    if (refererBasePath) {
      return refererBasePath;
    }
  }

  return "/";
}

function setResponsePublicBasePath(res: express.Response, publicBasePath: string): void {
  (res.locals as PublicBasePathLocals).publicBasePath = publicBasePath;