I have a widget that is deployed on some server lets say widget.com and it further calls apis to get the query responses chat_apis.com?query
and I am using this chat widget using iframe on different domain mydomain.com
like this
<iframe id="widgetWindow" src="http://widget.com?clientId=12" class="widget">
</iframe>
so hierarchy looks like this
mydomain.com
iframe
widget.com
chat_apis.com
Now on the chat_apis.com that is my python server i want to check from which host I am getting the requests to authorize the to selected domains.
Now if i check headers it sends widget.com as Origin but i need the mydomain.com on which widget is deployed.
Is it possible by this mean? Or any other preferred way if possible?