javier/construprogress
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(proxy): confiar en X-Forwarded-Proto del proxy inverso (evita http:// tras https)

Browse Source 
Sin trustProxies, la app tras un proxy HTTPS (OpenResty/Nginx) genera URLs con
http://, y las cookies "secure" no viajan → 419 en /livewire/update. Añadido
$middleware->trustProxies(at: '*') con los headers X-Forwarded-*.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This commit is contained in:
javier
2026-07-06 17:09:31 +02:00
co-authored by Claude Opus 4.7
parent fd9c12a074
commit e05958e89f
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bootstrap/app.php
+11
View File
@@ -14,6 +14,17 @@ return Application::configure(basePath: dirname(__DIR__))
->withMiddleware(function (Middleware $middleware): void { ->withMiddleware(function (Middleware $middleware): void {
$middleware->appendToGroup('web', \App\Http\Middleware\SetLocale::class); $middleware->appendToGroup('web', \App\Http\Middleware\SetLocale::class);
// Confiar en el proxy inverso (OpenResty/Nginx) para leer X-Forwarded-Proto:
// sin esto, tras HTTPS el proxy Laravel genera URLs con http:// y las cookies
// "secure" no viajan → 419 en /livewire/update.
$middleware->trustProxies(at: '*', headers:
Illuminate\Http\Request::HEADER_X_FORWARDED_FOR |
Illuminate\Http\Request::HEADER_X_FORWARDED_HOST |
Illuminate\Http\Request::HEADER_X_FORWARDED_PORT |
Illuminate\Http\Request::HEADER_X_FORWARDED_PROTO |
Illuminate\Http\Request::HEADER_X_FORWARDED_AWS_ELB,
);
// Spatie permission + Sanctum ability middleware aliases // Spatie permission + Sanctum ability middleware aliases
$middleware->alias([ $middleware->alias([
'role' => \Spatie\Permission\Middleware\RoleMiddleware::class, 'role' => \Spatie\Permission\Middleware\RoleMiddleware::class,