From 86ba2c4fe4cd9f86217148cf9e5f5a75ea7e1da1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Daniel=20Subiabre=20Garc=C3=ADa?= Date: Mon, 5 Oct 2026 15:43:20 +0200 Subject: [PATCH] fix: HTTPS in OAuth2 redirect_uri (#255) * feat: remove router schema force via config * fix: configure trusted proxies via env vars * fix: typo in var description --- .env | 3 +++ config/packages/framework.yaml | 2 ++ config/services.yaml | 5 ----- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.env b/.env index 9897b70..4b7704a 100644 --- a/.env +++ b/.env @@ -18,6 +18,9 @@ APP_ENV=dev APP_SECRET=b8ec44a08e5f4ba917879713a4a8e63c APP_LOCALE='es' +# DO NOT LEAVE OPEN UNLESS YOU'VE GUARANTEED THAT TRAFFIC WILL ONLY COME FROM TRUSTED ORIGINS +# https://symfony.com/doc/6.4/deployment/proxies.html +APP_TRUSTED_PROXIES='127.0.0.1,REMOTE_ADDR' ###< symfony/framework-bundle ### ###> doctrine/doctrine-bundle ### diff --git a/config/packages/framework.yaml b/config/packages/framework.yaml index 387064a..8fd40c8 100644 --- a/config/packages/framework.yaml +++ b/config/packages/framework.yaml @@ -28,6 +28,8 @@ framework: headers: 'User-Agent': 'Platoniq Goteo-v4-API' + trusted_proxies: '%env(APP_TRUSTED_PROXIES)%' + when@test: framework: test: true diff --git a/config/services.yaml b/config/services.yaml index bacb5c7..4680e63 100644 --- a/config/services.yaml +++ b/config/services.yaml @@ -6,11 +6,6 @@ parameters: env(OAUTH_ACCESS_TOKEN_TTL): PT1H -when@prod: - parameters: - router.request_context.scheme: 'https' - asset.request_context.secure: true - services: # default configuration for services in *this* file _defaults: