feat: enable proxy headers for secure connection handling

federation_authority/federation_authority/settingslocal.py

@@ -35,6 +35,8 @@ LOGOUT_REDIRECT_URL = "/oidc/rp/landing"
 LOGIN_URL = "/oidc/rp/landing"
 
 ALLOWED_HOSTS = [item.strip() for item in os.getenv('DJANGO_ALLOWED_HOSTS', '*').split(',') if item.strip()]
+USE_X_FORWARDED_HOST = True
+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
 AUTH_USER_MODEL = 'spid_cie_oidc_accounts.User'
 
 INSTALLED_APPS = [

federation_authority/federation_authority/settingslocal.py.example

@@ -111,6 +111,8 @@ FEDERATION_DEFAULT_POLICY = {
 }
 
 ALLOWED_HOSTS = ['*']
+USE_X_FORWARDED_HOST = True
+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
 AUTH_USER_MODEL = 'spid_cie_oidc_accounts.User'
 
 INSTALLED_APPS = [

provider/provider/settingslocal.py

@@ -42,6 +42,8 @@ LOGOUT_REDIRECT_URL = "/oidc/op/landing"
 LOGIN_URL = "/oidc/op/landing"
 
 ALLOWED_HOSTS = [item.strip() for item in os.getenv('DJANGO_ALLOWED_HOSTS', '*').split(',') if item.strip()]
+USE_X_FORWARDED_HOST = True
+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
 AUTH_USER_MODEL = 'spid_cie_oidc_accounts.User'
 
 INSTALLED_APPS = [

provider/provider/settingslocal.py.example

@@ -40,6 +40,8 @@ LOGOUT_REDIRECT_URL = "/oidc/op/landing"
 LOGIN_URL = "/oidc/op/landing"
 
 ALLOWED_HOSTS = ['*']
+USE_X_FORWARDED_HOST = True
+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
 AUTH_USER_MODEL = 'spid_cie_oidc_accounts.User'
 
 INSTALLED_APPS = [

relying_party/relying_party/settingslocal.py

@@ -48,6 +48,8 @@ VISIONE_DEFAULT_PROVIDER = os.getenv("DJANGO_RP_DEFAULT_PROVIDER", provider_issu
 VISIONE_DEFAULT_PROFILE = "cie"
 
 ALLOWED_HOSTS = [item.strip() for item in os.getenv('DJANGO_ALLOWED_HOSTS', '*').split(',') if item.strip()]
+USE_X_FORWARDED_HOST = True
+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
 AUTH_USER_MODEL = 'spid_cie_oidc_accounts.User'
 
 INSTALLED_APPS = [

relying_party/relying_party/settingslocal.py.example

@@ -42,6 +42,8 @@ LOGOUT_REDIRECT_URL = "/oidc/rp/landing"
 LOGIN_URL = "/oidc/rp/landing"
 
 ALLOWED_HOSTS = ['*']
+USE_X_FORWARDED_HOST = True
+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
 AUTH_USER_MODEL = 'spid_cie_oidc_accounts.User'
 
 INSTALLED_APPS = [