From daba03d25dce1871d1a1547033b4cf657f49fbf7 Mon Sep 17 00:00:00 2001
From: esdrasrenan <esdras@renan.dev>
Date: Tue, 9 Dec 2025 01:13:36 -0300
Subject: [PATCH] =?UTF-8?q?fix(handshake):=20evitar=20redirect=20para=20lo?=
 =?UTF-8?q?calhost=20quando=20em=20produ=C3=A7=C3=A3o?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/app/machines/handshake/route.ts | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/src/app/machines/handshake/route.ts b/src/app/machines/handshake/route.ts
index 4f25be4..3a6521f 100644
--- a/src/app/machines/handshake/route.ts
+++ b/src/app/machines/handshake/route.ts
@@ -46,7 +46,14 @@ export async function GET(request: NextRequest) {
   const derivedOrigin = hostHeader
     ? `${forwardedProto ?? schemeFromUrl ?? "https"}://${hostHeader}`
     : null
-  const baseOrigin = env.NEXT_PUBLIC_APP_URL ?? derivedOrigin ?? request.nextUrl.origin
+  const configuredAppUrl = env.NEXT_PUBLIC_APP_URL?.trim()
+  const isLocalHost =
+    configuredAppUrl &&
+    (configuredAppUrl.includes("localhost") || configuredAppUrl.includes("127.0.0.1"))
+
+  // Se a APP_URL configurada é localhost, usar o host real do request para evitar redirecionar para 127.0.0.1 em produção.
+  const baseOrigin =
+    (!configuredAppUrl || isLocalHost) ? derivedOrigin ?? request.nextUrl.origin : configuredAppUrl
   const redirectUrl = new URL(redirectParam, baseOrigin)
 
   try {