sdarbinyan/marketplaces
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge branch 'B2B'
Some checks failed
Architecture Governance / architecture (push) Has been cancelled
Details
Deploy Frontend / deploy (push) Has been cancelled
Details

Browse Source
This commit is contained in:
sdarbinyan
2026-08-20 16:29:22 +04:00
parent bc74fa77d9 92f1c884c9
commit 2e41e216c0
2 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
docs/backend/TENANT-API-DOMAIN-HANDOFF.md
View File

@@ -77,7 +77,10 @@ It creates the shared `api.gorbushka.market`, issues/renews its certificate,
configures CORS for `gorbushka.market` and its subdomains, and proxies all paths
to the backend. A request from `store1.gorbushka.market` reaches upstream with
`Host` and `X-Storefront-Host` set to `store1.gorbushka.market`, while
`X-Forwarded-Host` remains `api.gorbushka.market`.
`X-Forwarded-Host` remains `api.gorbushka.market`. nginx terminates CORS and
strips the browser `Origin` before proxying because the current `:445` service
rejects direct browser origins; tenant identity is carried by the trusted
storefront header instead.
`store1.example.com` requires no additional API DNS or certificate; it uses the
same `api.example.com` certificate as the root storefront.