Handle WEB_DOMAIN for login

Turns out .well-known routes are CORS-enabled
cheeaun · Sep 7, 2024 · 49c7ccb · 49c7ccb
1 parent 463ec48
commit 49c7ccb
Show file tree

Hide file tree

Showing 2 changed files with 35 additions and 12 deletions.
diff --git a/src/locales/en.po b/src/locales/en.po
diff --git a/src/pages/login.jsx b/src/pages/login.jsx
@@ -58,9 +58,32 @@ function Login() {
 
   const submitInstance = (instanceURL) => {
     if (!instanceURL) return;
-    store.local.set('instanceURL', instanceURL);
 
     (async () => {
+      // WEB_DOMAIN vs LOCAL_DOMAIN negotiation time
+      // https://docs.joinmastodon.org/admin/config/#web_domain
+      try {
+        const res = await fetch(`https://${instanceURL}/.well-known/host-meta`); // returns XML
+        const text = await res.text();
+        // Parse XML
+        const parser = new DOMParser();
+        const xmlDoc = parser.parseFromString(text, 'text/xml');
+        // Get Link[template]
+        const link = xmlDoc.getElementsByTagName('Link')[0];
+        const template = link.getAttribute('template');
+        const url = URL.parse(template);
+        const { host } = url; // host includes the port
+        if (instanceURL !== host) {
+          console.log(`💫 ${instanceURL} -> ${host}`);
+          instanceURL = host;
+        }
+      } catch (e) {
+        // Silently fail
+        console.error(e);
+      }
+
+      store.local.set('instanceURL', instanceURL);
+
       setUIState('loading');
       try {
         const { client_id, client_secret, vapid_key } =