BlackSheep icon indicating copy to clipboard operation
BlackSheep copied to clipboard

Improper handling of ASGI scope when SSL termination is used before the ASGI server

Open RobertoPrevato opened this issue 8 months ago • 1 comments

Describe the bug If uvicorn or another ASGI server is handling requests under a proxy server that does SSL termination, the method get_absolute_url_to_path returns a URL over http://, which is not correct and especially not correct in the context of the OpenID Connect integration where HTTPS in always usedm in practice.

RobertoPrevato avatar Dec 11 '23 15:12 RobertoPrevato