OAuth callback URL is only formatted for HTTP
nettoclaudio opened this issue · 0 comments
nettoclaudio commented
The OAuth callback URL scheme is hardcoded for http
(see the code snippet below).
tsuru-dashboard/tsuru_dashboard/auth/views.py
Line 140 in e75ac66
tsuru-dashboard/tsuru_dashboard/auth/views.py
Line 213 in e75ac66
The URL scheme should be formatted based on:
- the protocol used by app to run the server;
- the request headers such as
Forwarded
orX-Forwarded-Proto
whenever dashboard app is running behind a reverse proxy or load balancer.