Laravel License check gives 403 forbidden on non-local environments that do not match standard naming convention

[techgaun]

• Laravel Version: 11.45.0
• Nova Version: 4.35.10
• PHP Version: 8.3.15
• Database Driver & Version: mysql 8.0.40
• Operating System and Version: ECS Fargate / Docker Container using serversideup/php:8.3-fpm-nginx-alpine-v3.5.2
• Browser type and version: Chrome 137.0.7151.120
• Reproduction Repository: https://github.com/###/###

Description:

• We are using non-standard staging URL configured with a license key.
• We have run license check and received the message that the license is valid
• We have a middleware running that performs auth
• The gate for authorization has been simplified since the middleware is responsible for auth

protected function gate()
    {
        Gate::define('viewNova', function ($user) {
            return true;
        });
    }

• We have tested APP_ENV with staging - gives 403 forbidden
• We have tested APP_ENV with local - works fine
• We have also done extensive checks by enabling/disabling each middleware to rule out if any middleware is a problem but it does not seem to be

Detailed steps to reproduce the issue on a fresh Nova installation:

• use APP_ENV other than local
• use non-standard domain other than specified in https://nova.laravel.com/docs/v4/installation#using-nova-on-development-and-staging-domains (such as staging-internal)
• use NOVA_LICENSE_KEY which is a valid key and passes license check command with php artisan nova:check-license

[crynobone]

Unable to reproduce the issue, please provide full reproducing repository based on fresh installation as suggested in the bug report template (or you can refer to https://github.com/nova-issues for example)

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[crynobone]

if the sub domain is not something like 'staging' nova will treat it as a site that need a licensce which is not correct.

now u may say I can just change my staging subdomain. that is not always possible too. I had api integration where im forced to use a certain subdomain for my staging for example by a integration partner & that subdomain is not 'staging'

license check has nothing to do with 403 error.

[techgaun]

we were able to fix it with some infra changes