OID redirect behind reverse proxy

[Trapulo]

Version

5.0.3

Details & Steps to reproduce

I've a reverse proxy that performs HTTPS offloading and calls 2Fauth endpoint. All is ok.
I'm also using OID/OAUTH to authenticate users. 2Fauth is passing to the remote auth server a redirect url that is "http://myaddress" and not "https://myaddress".

I configured "APP_URL=https://myaddress" and also tried "TRUSTED_PROXIES=*" (I don't know if this is required: I work well also with null)

Expectation

2FAuth redirects user to remote authentication server passing https://myapp as redirect url.

Error & Logs

No response

Execution environment

No response

Containerization

• Docker

Additional information

No response

[Bubka]

Did you set ASSET_URL using the same value as APP_URL?

[Trapulo]

yes, and it is the https:// address.
The web app works well, the problem is only related to the backurl used in OID trip with authentication provider, where the url is changed in http://

[Bubka]

Oh ok, I got it. The redirect url is hardcoded in a config file using a relative path, so APP_URL has no effect.
If you need a quick fix, edit the file [2fauth_dir]/config/services.php on your server and make this change:

Replace (at line 30)
'redirect' => '/socialite/callback/openid',
With
'redirect' => env('APP_URL') . '/socialite/callback/openid',

[Trapulo]

I'm running on docker, and your image seems not containing bash, so I don't know how to edit it. I'll wait for new release with the fix, if this will be not to far.