From 3884bbf5617af9a72b29959edba53167ac4dc925 Mon Sep 17 00:00:00 2001
From: "DESKTOP-GBA0BK8\\Admin" <ameye@chiefsoft.com>
Date: Tue, 18 Apr 2023 16:45:13 -0400
Subject: [PATCH] header set

---
 www-api/app/Controllers/WrenchApi.php | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/www-api/app/Controllers/WrenchApi.php b/www-api/app/Controllers/WrenchApi.php
index 78e479cb..26b2d746 100644
--- a/www-api/app/Controllers/WrenchApi.php
+++ b/www-api/app/Controllers/WrenchApi.php
@@ -253,6 +253,24 @@ class WrenchApi extends BaseController
         return $in;
     }
     public function apigate(){
+
+        if (array_key_exists('HTTP_ORIGIN', $_SERVER)) {
+            $origin = $_SERVER['HTTP_ORIGIN'];
+        } else if (array_key_exists('HTTP_REFERER', $_SERVER)) {
+            $origin = $_SERVER['HTTP_REFERER'];
+        } else {
+            $origin = $_SERVER['REMOTE_ADDR'];
+        }
+        $allowed_domains = array(
+            'http://localhost:9082/',
+            'https://users.wrenchboard.com/',
+        );
+
+
+        if (in_array($origin, $allowed_domains)) {
+            header('Access-Control-Allow-Origin: ' . $origin);
+        }
+        
 /*
         //$request = service('request');
         header('Access-Control-Allow-Origin: *');