fix api-key creation response

Author: giancarloromeo

services/web/server/src/simcore_service_webserver/api_keys/_controller/rest.py

@@ -21,7 +21,7 @@
 from ...login.decorators import login_required
 from ...models import RequestContext
 from ...security.decorators import permission_required
-from ...utils_aiohttp import envelope_json_response
+from ...utils_aiohttp import envelope_json_response, iter_originating_hosts
 from .. import _service
 from ..models import ApiKey
 from .rest_exceptions import handle_plugin_requests_exceptions
@@ -36,6 +36,12 @@ class ApiKeysPathParams(StrictRequestParameters):
     api_key_id: IDStr
 
 
+def _get_api_base_url(request: web.Request) -> str:
+    originating_host = next(iter_originating_hosts(request), None)
+    api_host = f"api.{originating_host}"
+    return f"{request.url.with_host(api_host)}"
+
+
 @routes.post(f"/{API_VTAG}/auth/api-keys", name="create_api_key")
 @login_required
 @permission_required("user.apikey.*")
@@ -55,8 +61,8 @@ async def create_api_key(request: web.Request):
     api_key = ApiKeyCreateResponse.model_validate(
         {
             **asdict(created_api_key),
-            "api_base_url": "http://localhost:8000",
-        }  # TODO: https://github.com/ITISFoundation/osparc-simcore/issues/6340 # @pcrespov
+            "api_base_url": _get_api_base_url(request),
+        }
     )
 
     return envelope_json_response(api_key)

services/web/server/src/simcore_service_webserver/utils_aiohttp.py

@@ -1,6 +1,6 @@
 import io
 import logging
-from collections.abc import Callable
+from collections.abc import Callable, Generator
 from typing import Any, Generic, Literal, TypeAlias, TypeVar
 
 from aiohttp import web
@@ -128,3 +128,10 @@ class NextPage(BaseModel, Generic[PageParameters]):
         ..., description="Code name to the front-end page. Ideally a PageStr"
     )
     parameters: PageParameters | None = None
+
+
+def iter_originating_hosts(request) -> Generator[str, None, None]:
+    if (forwarded := request.headers.get("X-Forwarded-Host")) is not None:
+        yield forwarded
+    if request.host is not None:
+        yield request.host