I'm using express.js and I need to know the domain which is originating the call. This is the simple code
app.get(
'/verify_license_key.json',
function( req, res ) {
// do something
How do I get the domain from the req or the res object?
I mean I need to know if the API was called by somesite.example or someothersite.example.
I tried doing a console.dir of both req and res but I got no idea from there, also read the documentation but it gave me no help.
You have to retrieve it from the HOST header.
const host = req.get('host');
It is optional with HTTP 1.0, but required by 1.1. And, the app can always impose a requirement of its own.
If this is for supporting cross-origin requests, you would instead use the Origin header.
const origin = req.get('origin');
Note that some cross-origin requests require validation through a "preflight" request:
req.options('/route', function (req, res) {
const origin = req.get('origin');
// ...
});
If you're looking for the client's IP, you can retrieve that with:
const userIP = req.socket.remoteAddress;
Note that, if your server is behind a proxy, this will likely give you the proxy's IP. Whether you can get the user's IP depends on what info the proxy passes along. But, it'll typically be in the headers as well.
'user-agent': 'WordPress/3.6; http://localhost/wordpress_clean' should i parse that?Instead of:
var host = req.get('host');
var origin = req.get('origin');
you can also use:
var host = req.headers.host;
var origin = req.headers.origin;
undefined
localhost:3000 I believe. 127.0.0.1 refers to the local IP addressIn Express 4.x you can use req.hostname, which returns the domain name, without port. i.e.:
// Host: "example.com:3000"
req.hostname
// => "example.com"
Year 2022, I use express v4.17.1 get following result
var host = req.get('host'); // works, localhost:3000
var host = req.headers.host; // works, localhost:3000
var host = req.hostname; // works, localhost
var origin = req.get('origin'); // not work, undefined
var origin = req.headers.origin; // not work, undefined
req.get('host') is now deprecated, using it will give Undefined.
Use,
req.header('Origin');
req.header('Host');
// this method can be used to access other request headers like, 'Referer', 'User-Agent' etc.
As mentioned above origin was deprecated therefore I used:
const origin = req.headers.referer
you should remove the ending slash to make it same as the origin
req.hostorreq.get('host')expresses docsreq.headers["x-forwarded-for"] || req.connection.remoteAddressx-forwarded-for would cover your bases behind a proxy, load balancer...