Untrusted host while running with url different than localhost

Environment

• Docker for Mac 18.06.1-ce-mac73
• macOS High Sierra

Steps to reproduce

1. Install API Platform as described here: https://api-platform.com/docs/distribution#installing-the-framework (download package & run docker-compose up -d)
2. Open https://localhost in browser. It works.
3. (problem starts here) Add 127.0.0.1 myproject.dev to /etc/hosts
4. Edit src/Welcome.js and replace localhost with myproject.dev (not required nowadays, 2019-07-03, kniziol)
5. Open http://myproject.dev in browser. It works.
6. Click any link in first/left box of AVAILABLE SERVICES section (API or CACHED API)
7. You will see the Untrusted host exception:

1. Open api/.env
2. Add myproject.dev to TRUSTED_HOSTS (before: localhost,api, after: localhost,api,myproject.dev)
3. Go to step 6. Doesn’t work.
4. Clear cache & restart all containers by running docker-compose exec php bin/console c:c && docker-compose restart. Doesn’t work.
5. In api/public/index.php:31 value of $_SERVER['TRUSTED_HOSTS'] is still localhost,api, but it should be localhost,api,myproject.dev.

Solution

1. Open api/config/packages/framework.yaml
2. Add framework.trusted_hosts parameter:

framework:
    secret: '%env(APP_SECRET)%'
    trusted_hosts:
        - localhost
        - api
        - myproject.dev

1. Click any link in first/left box of AVAILABLE SERVICES section (API or CACHED API)
2. It works.

Problem

Host added to TRUSTED_HOSTS is not included.

[kniziol]

Solution

Domains should be separated by | (not by ,).

Incorrect

TRUSTED_HOSTS='^localhost,api,myproject.dev$'

Correct

TRUSTED_HOSTS='^localhost|api|myproject.dev$'

@teohhanhui @dunglas Problem solved. Thanks.

[kniziol]

@ghanbari Sorry, doesn’t work