Revert ForwardedHeaders changes - restore working baseline

Login was working before these changes. Reverting to known working state
without ForwardedHeaders middleware which was causing routing issues.
This commit is contained in:
2025-09-24 22:07:14 +01:00
parent 96a4c178bb
commit 069930fe40
7 changed files with 6 additions and 544 deletions

View File

@@ -1,6 +1,5 @@
using Microsoft.EntityFrameworkCore;
using Microsoft.AspNetCore.Authentication.JwtBearer;
using Microsoft.AspNetCore.HttpOverrides;
using Microsoft.IdentityModel.Tokens;
using System.Text;
using LittleShop.Data;
@@ -27,10 +26,6 @@ builder.Services.AddAntiforgery(options =>
{
options.HeaderName = "X-CSRF-TOKEN";
options.FormFieldName = "__RequestVerificationToken";
options.SuppressXFrameOptionsHeader = false;
// Required for HTTPS proxy scenarios
options.Cookie.SecurePolicy = Microsoft.AspNetCore.Http.CookieSecurePolicy.SameAsRequest;
options.Cookie.SameSite = Microsoft.AspNetCore.Http.SameSiteMode.Strict;
});
// Database
@@ -233,16 +228,6 @@ catch (Exception ex)
// Configure the HTTP request pipeline.
// Configure forwarded headers for proxy scenarios (nginx, etc)
var forwardedHeadersOptions = new ForwardedHeadersOptions
{
ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto
};
// Clear the default known networks/proxies to allow any proxy
forwardedHeadersOptions.KnownNetworks.Clear();
forwardedHeadersOptions.KnownProxies.Clear();
app.UseForwardedHeaders(forwardedHeadersOptions);
// Add CORS early in the pipeline - before authentication
if (app.Environment.IsDevelopment())
{
@@ -268,17 +253,16 @@ app.UseAuthentication();
app.UseAuthorization();
// Configure routing
app.MapControllerRoute(
name: "areas",
pattern: "{area:exists}/{controller=Home}/{action=Index}/{id?}");
app.MapControllerRoute(
name: "admin",
pattern: "Admin/{controller=Dashboard}/{action=Index}/{id?}",
defaults: new { area = "Admin" },
constraints: new { area = "Admin" }
defaults: new { area = "Admin" }
);
app.MapControllerRoute(
name: "areas",
pattern: "{area:exists}/{controller=Home}/{action=Index}/{id?}");
app.MapControllerRoute(
name: "default",
pattern: "{controller=Home}/{action=Index}/{id?}");