From 9fd3ef26878240721c0af97cd6556b817f6d05f5 Mon Sep 17 00:00:00 2001 From: Emil Thelin Date: Thu, 23 Apr 2015 20:38:00 +0200 Subject: [PATCH] Enforce domain --- pkg/middleware/middleware.go | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/pkg/middleware/middleware.go b/pkg/middleware/middleware.go index b93cd517364..a865b5b7f03 100644 --- a/pkg/middleware/middleware.go +++ b/pkg/middleware/middleware.go @@ -34,6 +34,16 @@ func GetContextHandler() macaron.Handler { AllowAnonymous: false, } + h := ctx.Req.Host + if i := strings.Index(h, ":"); i >= 0 { + h = h[:i] + } + + if !strings.EqualFold(h, setting.Domain) { + ctx.Redirect(strings.TrimSuffix(setting.AppUrl, "/") + ctx.Req.RequestURI, 301) + return + } + // the order in which these are tested are important // look for api key in Authorization header first // then init session and look for userId in session