Revert ForwardedHeaders changes - restore working baseline
Login was working before these changes. Reverting to known working state without ForwardedHeaders middleware which was causing routing issues.
This commit is contained in:
@@ -1,6 +1,5 @@
|
||||
using Microsoft.EntityFrameworkCore;
|
||||
using Microsoft.AspNetCore.Authentication.JwtBearer;
|
||||
using Microsoft.AspNetCore.HttpOverrides;
|
||||
using Microsoft.IdentityModel.Tokens;
|
||||
using System.Text;
|
||||
using LittleShop.Data;
|
||||
@@ -27,10 +26,6 @@ builder.Services.AddAntiforgery(options =>
|
||||
{
|
||||
options.HeaderName = "X-CSRF-TOKEN";
|
||||
options.FormFieldName = "__RequestVerificationToken";
|
||||
options.SuppressXFrameOptionsHeader = false;
|
||||
// Required for HTTPS proxy scenarios
|
||||
options.Cookie.SecurePolicy = Microsoft.AspNetCore.Http.CookieSecurePolicy.SameAsRequest;
|
||||
options.Cookie.SameSite = Microsoft.AspNetCore.Http.SameSiteMode.Strict;
|
||||
});
|
||||
|
||||
// Database
|
||||
@@ -233,16 +228,6 @@ catch (Exception ex)
|
||||
|
||||
// Configure the HTTP request pipeline.
|
||||
|
||||
// Configure forwarded headers for proxy scenarios (nginx, etc)
|
||||
var forwardedHeadersOptions = new ForwardedHeadersOptions
|
||||
{
|
||||
ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto
|
||||
};
|
||||
// Clear the default known networks/proxies to allow any proxy
|
||||
forwardedHeadersOptions.KnownNetworks.Clear();
|
||||
forwardedHeadersOptions.KnownProxies.Clear();
|
||||
app.UseForwardedHeaders(forwardedHeadersOptions);
|
||||
|
||||
// Add CORS early in the pipeline - before authentication
|
||||
if (app.Environment.IsDevelopment())
|
||||
{
|
||||
@@ -268,17 +253,16 @@ app.UseAuthentication();
|
||||
app.UseAuthorization();
|
||||
|
||||
// Configure routing
|
||||
app.MapControllerRoute(
|
||||
name: "areas",
|
||||
pattern: "{area:exists}/{controller=Home}/{action=Index}/{id?}");
|
||||
|
||||
app.MapControllerRoute(
|
||||
name: "admin",
|
||||
pattern: "Admin/{controller=Dashboard}/{action=Index}/{id?}",
|
||||
defaults: new { area = "Admin" },
|
||||
constraints: new { area = "Admin" }
|
||||
defaults: new { area = "Admin" }
|
||||
);
|
||||
|
||||
app.MapControllerRoute(
|
||||
name: "areas",
|
||||
pattern: "{area:exists}/{controller=Home}/{action=Index}/{id?}");
|
||||
|
||||
app.MapControllerRoute(
|
||||
name: "default",
|
||||
pattern: "{controller=Home}/{action=Index}/{id?}");
|
||||
|
||||
Reference in New Issue
Block a user