mamba-org/quetz

How to get https redirect_url for authorization

ZeissFlo opened this issue · 1 comments

Hi I tried using
redirect_http_to_https = true with the provided docker-compose example. I'm running into a 307 Temporary redirect error. I'm a bit lost about this. I'm not an expert in nginx or fastapi/starlette. Is there anything I need to change in the nginx config or entry point to the quetz server in order to get it running .

The reason why I want to use the HTTPSRedirectMiddleware is, that I think I would get then a https in redirect_uri for azurad oauth. It's only allowed to configure https there. But I get only http://my-quetz-server.com/auth/azuread/authorize in redirect_uri currently. The quetz-server will be behind an Ingress proxy. So I think redirect_http_to_https = false would be fine for me. I think I can also write a custom url_for method to get https in redirect_uri and make it configurable ...not sure if this is the correct way.

What would be the correct/best way of doing here? Or what I`m doing wrong Thank you!

Ah found it I need to set env var ` export FORWARDED_ALLOW_IPS='*'``as mentioned in #616 or encode/starlette#692