Fix: block tiny url domain while creating tiny url

config/core-config.go

@@ -26,6 +26,7 @@ var (
 	JwtIssuer            string
 	AllowedOrigin        string
 	Port                 string
+	WebAppBaseUrl     string
 )
 
 func findAndLoadEnv(envFile string) error {
@@ -108,6 +109,8 @@ func loadConfig() {
 
 	Port = getEnvVar("PORT")
 	JwtValidity = getEnvInt("JWT_VALIDITY_IN_HOURS")
+
+	WebAppBaseUrl = getEnvVar("WEB_APP_BASE_URL")
 }
 
 func getEnvVar(key string) string {

controllers/url.go

@@ -107,14 +107,20 @@ func CreateTinyURL(ctx *gin.Context, db *bun.DB) {
 		return
 	}
 
-	if strings.Contains(strings.ToLower(parsedUrl.Host),strings.ToLower(config.Domain)) {
+	parseConfig,err := url.Parse(config.WebAppBaseUrl);
+
+	if err != nil {
+		return;
+	}
+
+	if strings.Contains(strings.ToLower(parsedUrl.Host),strings.ToLower(parseConfig.Host)) {
 
 		path :=parsedUrl.Path
 
 		if len(path) >=1  {
 
 			ctx.JSON(http.StatusForbidden, dtos.URLCreationResponse{
-				Message: "Cannot create a tiny url for " + config.Domain,
+				Message: "Cannot create a tiny url for " + config.WebAppBaseUrl,
 			})
 
 			return

environments/test.env

@@ -6,6 +6,8 @@ JWT_ISSUER="tiny-site-backend"
 DOMAIN="localhost"
 AUTH_REDIRECT_URL="http://localhost:3000"
 
+WEB_APP_BASE_URL='http://localhost:3000'
+
 DB_URL="postgresql://postgres:postgres@localhost:5432/tiny-site?sslmode=disable"
 TEST_DB_URL="postgresql://postgres:postgres@localhost:5432/tiny-site-test?sslmode=disable"
 DB_MAX_OPEN_CONNECTIONS=10

tests/integration/url_test.go

@@ -263,7 +263,7 @@ func (suite *AppTestSuite) TestForbidTinyURLChaining() {
 	})
 
 	requestBody := map[string]interface{}{
-		"OriginalUrl": "https://localhost:8000/abcde",
+		"OriginalUrl": "https://localhost:3000/abcde",
 		"UserId":      1,
 	}