UseForwardedHeaders

src/PolicyInitiativeBuilder/Program.cs

@@ -1,6 +1,7 @@
 using Azure.Monitor.OpenTelemetry.AspNetCore;
 using Microsoft.AspNetCore.Authentication.OpenIdConnect;
 using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.HttpOverrides;
 using Microsoft.AspNetCore.Mvc.Authorization;
 using Microsoft.Extensions.Caching.Memory;
 using Microsoft.Identity.Web;
@@ -14,6 +15,11 @@
 builder.Services.AddControllersWithViews()
     .AddMicrosoftIdentityUI();
 
+builder.Services.Configure<ForwardedHeadersOptions>(options =>
+{
+    options.ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto;
+});
+
 var initialScopes = new[] { "https://management.azure.com/user_impersonation" };
 
 builder.Services.AddOpenTelemetry().UseAzureMonitor();
@@ -86,6 +92,7 @@
 app.UseStaticFiles();
 app.UseRouting();
 app.UseAntiforgery();
+app.UseForwardedHeaders();
 app.MapControllers();
 app.MapRazorPages();
 app.MapStaticAssets();