Mixed Content error on all API/datagrid routes with HTTPS

[rogeriocano]

Hello, I've found a bug in Krayin v2.1. The application generates mixed content (http) URLs for all its datagrid API calls (Dashboard, Users list, Groups list, etc.), causing the pages to get stuck in a loading state.

This happens even after confirming the following fixes:

1. APP_URL is set to https:// in the .env file.
2. URL::forceScheme('https') is active in AppServiceProvider.
3. All caches have been cleared (config:clear, cache:clear, etc.) and also re-cached (config:cache).
4. The incorrect http URL is not stored in the core_config database table.

The bug seems to be in the URL generation for API/datagrid routes, which does not respect the application's HTTPS configuration.

[rogeriocano]

Hello, I've found a critical bug in Krayin v2.1. The application generates http:// URLs for all of its CSS and JS assets, causing the browser to block them due to Mixed Content errors. This makes the admin panel unusable as it has no styling.

This happens regardless of the APP_DEBUG setting (true or false).

We have already tried all standard Laravel fixes:

1. APP_URL is correctly set to https://... in the .env file.
2. URL::forceScheme('https'); is active in AppServiceProvider.php.
3. All caches have been cleared and re-cached multiple times (config:clear, config:cache, etc.).

The bug seems to be in Krayin's internal asset URL generation, which completely ignores the standard Laravel HTTPS configuration.

[sagarkumar-webkul]

Could you please confirm if you're accessing the application through Ngrok? This often causes HTTPS detection issues and leads to mixed-content errors.

In the meantime, you can fix the issue by adding the following code inside App\Providers\AppServiceProvider in the register() method:

if (
    (isset($_SERVER['HTTPS']) && ($_SERVER['HTTPS'] === 'on' || $_SERVER['HTTPS'] == 1))
    || (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https')
) {
    $this->app['request']->server->set('HTTPS', true);
}

This forces Laravel to properly detect HTTPS when running behind Ngrok or a proxy.
After adding it, please clear the caches and reload the application.