Add X-Forwarded-Proto header

Guess protocol from redirect-url scheme if present, or from cookie-secure flag value. closes bitly#171
wistia · Jan 30, 2017 · fe92aa2 · fe92aa2
1 parent 80ffaae
commit fe92aa2
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/oauthproxy.go b/oauthproxy.go
@@ -618,6 +618,14 @@ func (p *OAuthProxy) Authenticate(rw http.ResponseWriter, req *http.Request) int
 	} else {
 		rw.Header().Set("GAP-Auth", session.Email)
 	}
+	switch {
+	case p.redirectURL.Scheme != "":
+		req.Header.Set("X-Forwarded-Proto", p.redirectURL.Scheme)
+	case p.CookieSecure:
+		req.Header.Set("X-Forwarded-Proto", "https")
+	default:
+		req.Header.Set("X-Forwarded-Proto", "http")
+	}
 	return http.StatusAccepted
 }