Files
OrderCheck/bootstrap/app.php
T
mrKamoo d67716516c fix: forcer HTTPS pour eviter mixed content en prod
Derriere reverse proxy, Laravel voyait les requetes en http et
generait des URLs d'assets http:// sur une page https:// (bloque
par le navigateur). Trust des headers X-Forwarded-* + forceScheme
quand APP_URL est en https.
2026-07-31 08:18:53 +02:00

34 lines
1.2 KiB
PHP

<?php
use Illuminate\Foundation\Application;
use Illuminate\Foundation\Configuration\Exceptions;
use Illuminate\Foundation\Configuration\Middleware;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Request as SymfonyRequest;
return Application::configure(basePath: dirname(__DIR__))
->withRouting(
web: __DIR__.'/../routes/web.php',
commands: __DIR__.'/../routes/console.php',
health: '/up',
)
->withMiddleware(function (Middleware $middleware): void {
$middleware->web(append: [
\App\Http\Middleware\HandleInertiaRequests::class,
\Illuminate\Http\Middleware\AddLinkHeadersForPreloadedAssets::class,
]);
$middleware->trustProxies(
at: '*',
headers: SymfonyRequest::HEADER_X_FORWARDED_FOR
| SymfonyRequest::HEADER_X_FORWARDED_HOST
| SymfonyRequest::HEADER_X_FORWARDED_PORT
| SymfonyRequest::HEADER_X_FORWARDED_PROTO,
);
})
->withExceptions(function (Exceptions $exceptions): void {
$exceptions->shouldRenderJsonWhen(
fn (Request $request) => $request->is('api/*'),
);
})->create();