fix: oidc http/https redirect issue

Author: LukeGus

docker/nginx-https.conf

@@ -90,7 +90,7 @@ http {
             proxy_set_header Host $host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
         }
 
         location ~ ^/users(/.*)?$ {
@@ -99,7 +99,7 @@ http {
             proxy_set_header Host $host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
         }
 
         location ~ ^/version(/.*)?$ {

docker/nginx.conf

@@ -79,7 +79,7 @@ http {
             proxy_set_header Host $host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
         }
 
         location ~ ^/users(/.*)?$ {
@@ -88,7 +88,7 @@ http {
             proxy_set_header Host $host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
         }
 
         location ~ ^/version(/.*)?$ {

src/backend/database/routes/users.ts

@@ -46,10 +46,6 @@ import { loginRateLimiter } from "../../utils/login-rate-limiter.js";
 
 const authManager = AuthManager.getInstance();
 
-/**
- * Get OIDC configuration from environment variables.
- * Returns null if required env vars are not set.
- */
 function getOIDCConfigFromEnv(): {
   client_id: string;
   client_secret: string;
@@ -1309,9 +1305,8 @@ router.get("/oidc/callback", async (req, res) => {
     }
 
     try {
-      const { SharedCredentialManager } = await import(
-        "../../utils/shared-credential-manager.js"
-      );
+      const { SharedCredentialManager } =
+        await import("../../utils/shared-credential-manager.js");
       const sharedCredManager = SharedCredentialManager.getInstance();
       await sharedCredManager.reEncryptPendingCredentialsForUser(userRecord.id);
     } catch {
@@ -1519,9 +1514,8 @@ router.post("/login", async (req, res) => {
     }
 
     try {
-      const { SharedCredentialManager } = await import(
-        "../../utils/shared-credential-manager.js"
-      );
+      const { SharedCredentialManager } =
+        await import("../../utils/shared-credential-manager.js");
       const sharedCredManager = SharedCredentialManager.getInstance();
       await sharedCredManager.reEncryptPendingCredentialsForUser(userRecord.id);
     } catch (error) {