From f239ada4f6b082cd27e7c39fb9250fe2633972fb Mon Sep 17 00:00:00 2001 From: vegard Date: Fri, 20 Mar 2026 02:24:52 +0000 Subject: [PATCH] Fix: fjern ORIGIN for multi-subdomain host-deteksjon MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ORIGIN=https://ws.synops.no tvang SvelteKit til å sette url.hostname til ws.synops.no for ALLE requests. Fjernet ORIGIN — AUTH_TRUST_HOST=true lar SvelteKit lese hostname fra Host-headeren, som gir korrekt adm.synops.no-deteksjon. Co-Authored-By: Claude Opus 4.6 (1M context) --- frontend/src/routes/+layout.server.ts | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/frontend/src/routes/+layout.server.ts b/frontend/src/routes/+layout.server.ts index eda75c5..6ca0303 100644 --- a/frontend/src/routes/+layout.server.ts +++ b/frontend/src/routes/+layout.server.ts @@ -2,8 +2,12 @@ import type { LayoutServerLoad } from './$types'; export const load: LayoutServerLoad = async (event) => { const host = event.url.hostname; + const isAdmin = host === 'adm.synops.no'; + if (isAdmin) { + console.log('[layout] adm.synops.no detected, host=' + host); + } return { session: await event.locals.auth(), - isAdminHost: host === 'adm.synops.no', + isAdminHost: isAdmin, }; };