feat: implement HTTPS middleware and static OAuth URL configuration

This commit is contained in:
Christian Krakau-Louis
2025-06-09 15:32:58 +02:00
parent c6b89781c9
commit 9caf9ec791
6 changed files with 218 additions and 14 deletions
+20
View File
@@ -0,0 +1,20 @@
# Standard OAuth redirect URIs
SPOTIFY_REDIRECT_URI=https://qb.kaufdeinquiz.com/auth/spotify/callback
GOOGLE_REDIRECT_URI=https://qb.kaufdeinquiz.com/users/login/google/callback
AUTHENTIK_REDIRECT_URI=https://qb.kaufdeinquiz.com/users/login/authentik/callback
DROPBOX_REDIRECT_URI=https://qb.kaufdeinquiz.com/users/dropbox/callback
# OAuth settings
USE_HTTPS=True # Set to True when behind a reverse proxy with HTTPS offloading
PREFERRED_URL_SCHEME=https # Explicitly set the preferred URL scheme
# Static OAuth redirect URIs for production environments
# These override the dynamic URLs generated by url_for() when specified
STATIC_OAUTH_URLS=True # Enable static URLs
OAUTH_SPOTIFY_AUTH_URL=https://qb.kaufdeinquiz.com/auth/spotify/callback
OAUTH_SPOTIFY_LINK_URL=https://qb.kaufdeinquiz.com/users/spotify-link/callback
OAUTH_GOOGLE_URL=https://qb.kaufdeinquiz.com/users/login/google/callback
OAUTH_AUTHENTIK_URL=https://qb.kaufdeinquiz.com/users/login/authentik/callback
OAUTH_DROPBOX_URL=https://qb.kaufdeinquiz.com/users/dropbox/callback
# Important: Make sure these static URLs match your actual server URLs and OAuth provider configurations