referer

app.py

@@ -108,7 +108,7 @@ app.add_middleware(
 
 @app.middleware("http")
 async def validate_origin(request: Request, call_next):
-    if request.headers.get("origin") not in origins and not DEV:
+    if request.headers.get("referer") not in origins and not DEV:
         raise HTTPException(status_code=403, detail="Forbidden")
     response = await call_next(request)
     return response