danvics/Pulse
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: respect X-Forwarded-Proto header for hasHTTPS in /api/security/status

Browse source 
Fixes issue where /api/security/status reports hasHTTPS=false when accessed
via HTTPS through a reverse proxy like Caddy.

Resolves feedback from discussion #845 (clar2242).
This commit is contained in:
rcourtman 2025-12-19 14:40:23 +00:00
parent f29d8b1b43
commit fdb6789a63
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
internal/api/router.go
View file

@ -549,7 +549,7 @@ func (r *Router) setupRoutes() {
"configuredButPendingRestart": configuredButPendingRestart, "configuredButPendingRestart": configuredButPendingRestart,
"hasAuditLogging": hasAuditLogging, "hasAuditLogging": hasAuditLogging,
"credentialsEncrypted": credentialsEncrypted, "credentialsEncrypted": credentialsEncrypted,
"hasHTTPS": req.TLS != nil, "hasHTTPS": req.TLS != nil || strings.EqualFold(req.Header.Get("X-Forwarded-Proto"), "https"),
"clientIP": clientIP, "clientIP": clientIP,
"isPrivateNetwork": isPrivateNetwork, "isPrivateNetwork": isPrivateNetwork,
"isTrustedNetwork": isTrustedNetwork, "isTrustedNetwork": isTrustedNetwork,