Added HOST_URL setting

README.rst

@@ -131,6 +131,7 @@ environment or included in ``PROJECT_ROOT/.env``.
     STELLAR_NETWORK_PASSPHRASE="Test SDF Network ; September 2015"
     HORIZON_URI="https://horizon-testnet.stellar.org/"
     SERVER_JWT_KEY="yoursupersecretjwtkey"
+    HOST_URL="https://example.com"
 
 Polaris supports anchoring one or multiple assets on the Stellar network. ``ASSETS``
 should be a comma-separated list of asset codes such as "USD", "ETH", or "MYCOIN".

docs/index.rst

@@ -128,6 +128,7 @@ environment or included in ``PROJECT_ROOT/.env``.
     STELLAR_NETWORK_PASSPHRASE="Test SDF Network ; September 2015"
     HORIZON_URI="https://horizon-testnet.stellar.org/"
     SERVER_JWT_KEY="yoursupersecretjwtkey"
+    HOST_URL="https://example.com"
 
 Polaris supports anchoring one or multiple assets on the Stellar network. ``ASSETS``
 should be a comma-separated list of asset codes such as "USD", "ETH", or "MYCOIN".

polaris/.env.example

@@ -18,7 +18,11 @@ SIGNING_SEED="SCY4F6VEIIPXPLTNQSFT5427H64YK3H3LB27H7WAOVDQSV2UACRWTPGM"
 # "Public Global Stellar Network ; September 2015" or a custom passphrase
 # if you're using a private network.
 STELLAR_NETWORK_PASSPHRASE="Test SDF Network ; September 2015"
+
 # HORIZON_URI can point to a custom Horizon URI. It currently points
 # to the testnet URL.
 HORIZON_URI="https://horizon-testnet.stellar.org/"
+
 SERVER_JWT_KEY="secret"
+
+HOST_URL="https://example.com"

polaris/polaris/helpers.py

@@ -1,4 +1,5 @@
 """This module defines helpers for various endpoints."""
+import os
 import logging
 import codecs
 import time
@@ -109,7 +110,7 @@ def validate_jwt_request(request: Request) -> str:
     except InvalidTokenError as e:
         raise ValueError(str(e))
 
-    if jwt_dict["iss"] != request.build_absolute_uri("/auth"):
+    if jwt_dict["iss"] != os.path.join(settings.HOST_URL, "auth"):
         raise ValueError("'jwt' has incorrect 'issuer'")
     current_time = time.time()
     if current_time < jwt_dict["iat"] or current_time > jwt_dict["exp"]:

polaris/polaris/sep10auth/views.py

@@ -5,6 +5,7 @@
 
 See: https://github.com/stellar/stellar-protocol/blob/master/ecosystem/sep-0010.md
 """
+import os
 import binascii
 import json
 import time
@@ -166,7 +167,7 @@ def _generate_jwt(request: Request, envelope_xdr: str) -> str:
         )
         hash_hex = binascii.hexlify(transaction_envelope.hash()).decode()
         jwt_dict = {
-            "iss": request.build_absolute_uri("/auth"),
+            "iss": os.path.join(settings.HOST_URL, "auth"),
             "sub": source_account,
             "iat": issued_at,
             "exp": issued_at + 24 * 60 * 60,

polaris/polaris/settings.py

@@ -59,3 +59,4 @@
 OPERATION_DEPOSIT = "deposit"
 OPERATION_WITHDRAWAL = "withdraw"
 ACCOUNT_STARTING_BALANCE = str(2.01)
+HOST_URL = env("HOST_URL")