From 863c17f9bc2d0aef59177ab856caf5dc8839621e Mon Sep 17 00:00:00 2001 From: DevSoftTech Server Date: Fri, 28 Aug 2026 02:46:01 +0530 Subject: [PATCH] fix(config): dynamically resolve baseURL from request HTTP_HOST to prevent CORS errors on live servers --- app/Config/App.php | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/app/Config/App.php b/app/Config/App.php index 5be23ee..28532f6 100644 --- a/app/Config/App.php +++ b/app/Config/App.php @@ -27,11 +27,13 @@ class App extends BaseConfig $this->allowedHostnames = $envAllowedHostnames; } - if ($this->baseURL === '') { - $isHttps = ! empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off'; + $envBaseUrl = (string) env('app.baseURL', ''); + if ($envBaseUrl !== '') { + $this->baseURL = rtrim($envBaseUrl, '/') . '/'; + } elseif (! empty($_SERVER['HTTP_HOST'])) { + $isHttps = (! empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') || ($_SERVER['HTTP_X_FORWARDED_PROTO'] ?? '') === 'https'; $scheme = $isHttps ? 'https' : 'http'; - $host = $_SERVER['HTTP_HOST'] ?? $_SERVER['SERVER_NAME'] ?? 'localhost'; - + $host = $_SERVER['HTTP_HOST']; $this->baseURL = $scheme . '://' . $host . '/'; } }