blocked: mixed-content / CORS errors

[geuben]

blocked: mixed content or CORS request errors (if I allow insecure content)

I updated from version 0.4 and I'm now seeing errors when I deploy to my K8S cluster. Everything works locally on http but not via https when deployed.

Did something change in the way the UI parts call the API parts?

[geuben]

I managed to solve this with some additional uvicorn parameters --proxy-headers --forwarded-allow-ips

it's related to a starlette issue: https://github.com/encode/starlette/issues/538