feat: enable proxy headers for secure connection handling

federation_authority/federation_authority/settingslocal.py

@@ -35,6 +35,8 @@ LOGOUT_REDIRECT_URL = "/oidc/rp/landing"
 LOGIN_URL = "/oidc/rp/landing"
 
 ALLOWED_HOSTS = [item.strip() for item in os.getenv('DJANGO_ALLOWED_HOSTS', '*').split(',') if item.strip()]
+USE_X_FORWARDED_HOST = True
+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
 AUTH_USER_MODEL = 'spid_cie_oidc_accounts.User'
 
 INSTALLED_APPS = [

federation_authority/federation_authority/settingslocal.py.example

@@ -111,6 +111,8 @@ FEDERATION_DEFAULT_POLICY = {
 }
 
 ALLOWED_HOSTS = ['*']
+USE_X_FORWARDED_HOST = True
+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
 AUTH_USER_MODEL = 'spid_cie_oidc_accounts.User'
 
 INSTALLED_APPS = [