Enforcing https when generating redirect url for oauth2 flow

[jishi]

Issue submitter TODO list

• I've searched for an already existing issues here
• I'm running a supported version of the application which is listed here and the feature is not present there

Is your proposal related to a problem?

I just finished setting up oauth2 against AzureAD and it seems to work great apart from one issue. I have my service behind a loadbalancer which publically uses https, but the upstream/origin is using http.

Due to this fact, the oauth2 is producing a redirect uri that has http-scheme, and not https (probably since it use the request context to decide this).

If I manually set the redirect-uri configuration setting, I can force it to https but then I need to also know exactly which hostname it uses (doable, but reguires more configuration juggling).

Is there any way to enforce https for generated URLs? I tried looking at the documentation, but couldn't find anything.

Describe the feature you're interested in

I would like a way to tell the oauth2 login system that it should generate links with https scheme even though the service is running over http.

Having the TLS session terminate at a loadbalancer is not that uncommon, so I feel that I'm not alone on this even if I couldn't find any other issue for it.

Describe alternatives you've considered

I can use redirect-uri but then the configuration needs to know about the actual hostname in use, this complicates a multi-env setup (with, dev, stage, prod).

Version you're running

8b5494b v1.3.0

Additional context

No response

[github-actions]

Hi jishi! 👋

Welcome, and thank you for opening your first issue in the repo!

Please wait for triaging by our maintainers.

As development is carried out in our spare time, you can support us by sponsoring our activities or even funding the development of specific issues.
Sponsorship link

If you plan to raise a PR for this issue, please take a look at our contributing guide.

[Haarolean]

Hi, could you please try this solution:
https://ui.docs.kafbat.io/faq/common-problems#urls-are-invalid-contain-ports-when-behind-a-reverse-proxy
?

[kapybro]

Further user feedback is requested. Please reply within 7 days or we might close the issue.

[jishi]

Oh nice, that works as expected! I would not have inferred that from the documentation unless hinted that it should work (for this).

I tried to find that section in the repo to update the documentation but couldn't find it?

[kapybro]

Thanks for the additional feedback! We'll get back to your issue soon.

[Haarolean]

Oh nice, that works as expected! I would not have inferred that from the documentation unless hinted that it should work (for this).

I tried to find that section in the repo to update the documentation but couldn't find it?

yeah I get it, it was documented for another issue kinda, so it's not that obvious. Please update it here if you don't mind:
https://github.com/kafbat/ui-docs