A technical glitch sent to review AND Enum AND TrustProxy. The first intent were to send only the TrustProxy part.
Enum
Imported an Enum type
Next differential revision to come using this Enum
A new TrustProxy middleware allows to set a trust strategy about
potentially spoofable headers like HTTP_X_FORWARDED_PROTO and
HTTP_X_FORWARDED_FOR. This solves the proxy HTTPS problem.
We an app.proxy configuration option defined like this:
Auth Grove can handle proxy headers like HTTP_X_FORWARDED_PROTO
according your configuration.
- To always trust forward headers, adds a star entry: ['*']
- To never trust any server, use an empty array: []
- To specify the proxies servers, create an array with each IP.
If you put Auth Grove on an back-end application server, with a
front-end nginx responsible for SSL termination,
you can set the front-end IPs or blindly trust any remote
address with a magic entry '*'.