fix: HTTPS in OAuth2 redirect_uri (#255)

* feat: remove router schema force via config

* fix: configure trusted proxies via env vars

* fix: typo in var description

.env

@@ -18,6 +18,9 @@
 APP_ENV=dev
 APP_SECRET=b8ec44a08e5f4ba917879713a4a8e63c
 APP_LOCALE='es'
+# DO NOT LEAVE OPEN UNLESS YOU'VE GUARANTEED THAT TRAFFIC WILL ONLY COME FROM TRUSTED ORIGINS
+# https://symfony.com/doc/6.4/deployment/proxies.html
+APP_TRUSTED_PROXIES='127.0.0.1,REMOTE_ADDR'
 ###< symfony/framework-bundle ###
 
 ###> doctrine/doctrine-bundle ###

config/packages/framework.yaml

@@ -28,6 +28,8 @@ framework:
             headers:
                 'User-Agent': 'Platoniq Goteo-v4-API'
 
+    trusted_proxies: '%env(APP_TRUSTED_PROXIES)%'
+
 when@test:
     framework:
         test: true

config/services.yaml

@@ -6,11 +6,6 @@
 parameters:
     env(OAUTH_ACCESS_TOKEN_TTL): PT1H
 
-when@prod:
-    parameters:
-        router.request_context.scheme: 'https'
-        asset.request_context.secure: true
-
 services:
     # default configuration for services in *this* file
     _defaults: