diff --git a/bootstrap/app.php b/bootstrap/app.php index ff6354c..d9beb16 100644 --- a/bootstrap/app.php +++ b/bootstrap/app.php @@ -14,6 +14,17 @@ return Application::configure(basePath: dirname(__DIR__)) ->withMiddleware(function (Middleware $middleware): void { $middleware->appendToGroup('web', \App\Http\Middleware\SetLocale::class); + // Confiar en el proxy inverso (OpenResty/Nginx) para leer X-Forwarded-Proto: + // sin esto, tras HTTPS el proxy Laravel genera URLs con http:// y las cookies + // "secure" no viajan → 419 en /livewire/update. + $middleware->trustProxies(at: '*', headers: + Illuminate\Http\Request::HEADER_X_FORWARDED_FOR | + Illuminate\Http\Request::HEADER_X_FORWARDED_HOST | + Illuminate\Http\Request::HEADER_X_FORWARDED_PORT | + Illuminate\Http\Request::HEADER_X_FORWARDED_PROTO | + Illuminate\Http\Request::HEADER_X_FORWARDED_AWS_ELB, + ); + // Spatie permission + Sanctum ability middleware aliases $middleware->alias([ 'role' => \Spatie\Permission\Middleware\RoleMiddleware::class,