You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@superset.apache.org by GitBox <gi...@apache.org> on 2019/12/16 10:54:29 UTC
[GitHub] [incubator-superset] PeterCahn opened a new issue #8841: /shortner
API does not take into account when Superset is behind a reverse proxy to
be served over HTTPS
PeterCahn opened a new issue #8841: /shortner API does not take into account when Superset is behind a reverse proxy to be served over HTTPS
URL: https://github.com/apache/incubator-superset/issues/8841
When Superset is served over HTTPS by a reverse proxy (nginx/Apache), the generated URL has "http" as scheme instead of "https".
The URL scheme is generated from the value of `request.scheme`, but it should take into account also headers like X-Forwarded-Proto and, in general, X-Forwarded-* headers (e.g for host).
### Expected results
The URL starts with "https://"
### Actual results
The URL starts with "http://"
#### Screenshots
#### How to reproduce the bug
1. Put nginx or Apache in front of Superset to serve it over HTTPS
(Superset has config "ENABLE_PROXY_FIX = True" and the server adds the header X-Forwarded-Proto and sets it to "https")
2. Go to a dashboard
3. Click on the arrow on the right, then click to "Share dashboard"
4. See error
### Environment
- superset version: 0.34.0
- python version: 3.6.9
### Checklist
- [x] I have checked the superset logs for python stacktraces and included it here as text if there are any.
- [ ] I have reproduced the issue with at least the latest released version of superset.
- [x] I have checked the issue tracker for the same issue and I haven't found one similar.
### Additional context
HTTPS works as expected on all others urls without problems, the reverse proxy redirects all the requests from http to https.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org