BlackSheep
BlackSheep copied to clipboard
Improper handling of ASGI scope when SSL termination is used before the ASGI server
Describe the bug
If uvicorn
or another ASGI server is handling requests under a proxy server that does SSL termination, the method get_absolute_url_to_path
returns a URL over http://
, which is not correct and especially not correct in the context of the OpenID Connect integration where HTTPS in always usedm in practice.