feat: priortize NEXTAUTH_URL_INTERNAL (#6814)

nextauthjs · Feb 25, 2023 · 2fb34ba · 2fb34ba · vercel · Feb 25, 2023
1 parent d0e7689
commit 2fb34ba
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/packages/next-auth/src/utils/detect-host.ts b/packages/next-auth/src/utils/detect-host.ts
@@ -1,5 +1,10 @@
 /** Extract the host from the environment */
 export function detectHost(forwardedHost: any) {
+  // if `NEXTAUTH_URL_INTERNAL` is set, it means NextAuth.js is deployed 
+  // behind a proxy - we prioritize it over `forwardedHost`.
+  if (process.env.NEXTAUTH_URL_INTERNAL) {
+    return process.env.NEXTAUTH_URL_INTERNAL
+  }
   // If we detect a Vercel environment, we can trust the host
   if (process.env.VERCEL ?? process.env.AUTH_TRUST_HOST)
     return forwardedHost