<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML>
<HEAD>
<TITLE> [99s-extend] Cowboy Calling Hostname
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:extend%40lists.ninenines.eu?Subject=Re%3A%20%5B99s-extend%5D%20Cowboy%20Calling%20Hostname&In-Reply-To=%3CCALvUveMuMZabtizGQDURJs7x62RjZNr%3DNukQLF49MDtZBiPF6A%40mail.gmail.com%3E">
<META NAME="robots" CONTENT="index,nofollow">
<style type="text/css">
pre {
white-space: pre-wrap; /* css-2.1, curent FF, Opera, Safari */
}
</style>
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="000263.html">
<LINK REL="Next" HREF="000265.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[99s-extend] Cowboy Calling Hostname</H1>
<B>Nathan Michaels</B>
<A HREF="mailto:extend%40lists.ninenines.eu?Subject=Re%3A%20%5B99s-extend%5D%20Cowboy%20Calling%20Hostname&In-Reply-To=%3CCALvUveMuMZabtizGQDURJs7x62RjZNr%3DNukQLF49MDtZBiPF6A%40mail.gmail.com%3E"
TITLE="[99s-extend] Cowboy Calling Hostname">nathan at nmichaels.org
</A><BR>
<I>Wed Oct 9 17:51:14 CEST 2013</I>
<P><UL>
<LI>Previous message: <A HREF="000263.html">[99s-extend] Cowboy Calling Hostname
</A></li>
<LI>Next message: <A HREF="000265.html">[99s-extend] Cowboy Calling Hostname
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#264">[ date ]</a>
<a href="thread.html#264">[ thread ]</a>
<a href="subject.html#264">[ subject ]</a>
<a href="author.html#264">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>Is the client making the request to your service on widgets.net because
things.com sent them there, or is things.com making the request directly on
behalf of the client? The first is what Loïc is talking about. The second
is the source IP of the request, which you can definitely get.
On Wed, Oct 9, 2013 at 11:32 AM, Loïc Hoguin <<A HREF="https://lists.ninenines.eu/listinfo/extend">essen at ninenines.eu</A>> wrote:
><i> In short: you can't.
</I>><i>
</I>><i> Browsers may send origin/referer/.. headers depending on the type of
</I>><i> request, but you can't rely on them to be real or even just there.
</I>><i>
</I>><i>
</I>><i> On 10/09/2013 05:30 PM, Lee Sylvester wrote:
</I>><i>
</I>>><i> Thank you. I couldn't work out if that's the host being called from or
</I>>><i> the host name in the request. For example, a store called things.commakes a request to my service on
</I>>><i> widgets.net. I need to see that the request is made FROM things.com for
</I>>><i> validation purposes. Is it correct that host will provide this?
</I>>><i>
</I>>><i> Thanks,
</I>>><i> Lee
</I>>><i>
</I>>><i> Sent from my iPhone
</I>>><i>
</I>>><i> On Oct 9, 2013, at 2:31 PM, Loïc Hoguin <<A HREF="https://lists.ninenines.eu/listinfo/extend">essen at ninenines.eu</A>> wrote:
</I>>>><i>
</I>>>><i> cowboy_req:host/1?
</I>>>><i>
</I>>>><i> Please use the nice manual we have now.
</I>>>><i>
</I>>>><i> <A HREF="http://ninenines.eu/docs/en/**cowboy/HEAD/manual/cowboy_req<http://ninenines.eu/docs/en/cowboy/HEAD/manual/cowboy_req">http://ninenines.eu/docs/en/**cowboy/HEAD/manual/cowboy_req<http://ninenines.eu/docs/en/cowboy/HEAD/manual/cowboy_req</A>>
</I>>>><i>
</I>>>><i> On 10/09/2013 03:27 PM, Lee Sylvester wrote:
</I>>>>><i> Hi,
</I>>>>><i>
</I>>>>><i> When receiving a Cowboy request, is there a way to find out which
</I>>>>><i> hostname the user made the request from? I'm using CORS in my REST and
</I>>>>><i> Bullet app, where each call can be made through a given account. However,
</I>>>>><i> I'd like to be able to lock requests for each account to a designated
</I>>>>><i> hostname to protect that users account usage.
</I>>>>><i>
</I>>>>><i> Thanks,
</I>>>>><i> Lee
</I>>>>><i>
</I>>>>><i> ______________________________**_________________
</I>>>>><i> Extend mailing list
</I>>>>><i> <A HREF="https://lists.ninenines.eu/listinfo/extend">Extend at lists.ninenines.eu</A>
</I>>>>><i> <A HREF="http://lists.ninenines.eu:81/**listinfo/extend<http://lists.ninenines.eu:81/listinfo/extend">http://lists.ninenines.eu:81/**listinfo/extend<http://lists.ninenines.eu:81/listinfo/extend</A>>
</I>>>>><i>
</I>>>><i>
</I>>>><i>
</I>>>><i> --
</I>>>><i> Loïc Hoguin
</I>>>><i> Erlang Cowboy
</I>>>><i> Nine Nines
</I>>>><i> <A HREF="http://ninenines.eu">http://ninenines.eu</A>
</I>>>><i>
</I>>><i>
</I>><i>
</I>><i> --
</I>><i> Loïc Hoguin
</I>><i> Erlang Cowboy
</I>><i> Nine Nines
</I>><i> <A HREF="http://ninenines.eu">http://ninenines.eu</A>
</I>><i> ______________________________**_________________
</I>><i> Extend mailing list
</I>><i> <A HREF="https://lists.ninenines.eu/listinfo/extend">Extend at lists.ninenines.eu</A>
</I>><i> <A HREF="http://lists.ninenines.eu:81/**listinfo/extend<http://lists.ninenines.eu:81/listinfo/extend">http://lists.ninenines.eu:81/**listinfo/extend<http://lists.ninenines.eu:81/listinfo/extend</A>>
</I>><i>
</I>-------------- next part --------------
An HTML attachment was scrubbed...
URL: <<A HREF="http://lists.ninenines.eu/archives/extend/attachments/20131009/cc05d6f5/attachment.html">http://lists.ninenines.eu/archives/extend/attachments/20131009/cc05d6f5/attachment.html</A>>
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="000263.html">[99s-extend] Cowboy Calling Hostname
</A></li>
<LI>Next message: <A HREF="000265.html">[99s-extend] Cowboy Calling Hostname
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#264">[ date ]</a>
<a href="thread.html#264">[ thread ]</a>
<a href="subject.html#264">[ subject ]</a>
<a href="author.html#264">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://lists.ninenines.eu/listinfo/extend">More information about the Extend
mailing list</a><br>
</body></html>
