هتظبط المرادي

backend/GraduationProjectWebApplication/Program.cs

@@ -20,6 +20,8 @@
 using System.Collections;
 using System.Text;
 using System.Threading.RateLimiting;
+using Microsoft.AspNetCore.HttpOverrides;
+
 
 namespace GraduationProjectWebApplication
 {
@@ -123,6 +125,9 @@ public static void Main(string[] args)
                 options.ClientId = GoogleClientId;
                 options.ClientSecret = GoogleClientSecret;
                 options.CallbackPath = "/api/signin-google";
+
+                options.SignInScheme = IdentityConstants.ExternalScheme; // Ensures it uses Identity's external cookie
+                options.CorrelationCookie.SecurePolicy = CookieSecurePolicy.Always; // Forces the Secure flag
             });
 
             /*=================== Swagger ===================*/
@@ -321,6 +326,21 @@ await context.HttpContext.Response.WriteAsJsonAsync(new
 
             var app = builder.Build();
 
+
+            /* ===== Forwarded Headers (ADD HERE) ===== */
+            var options = new ForwardedHeadersOptions
+            {
+                ForwardedHeaders = ForwardedHeaders.XForwardedFor |
+                                   ForwardedHeaders.XForwardedProto |
+                                   ForwardedHeaders.XForwardedHost
+            };
+
+            options.KnownNetworks.Clear();
+            options.KnownProxies.Clear();
+
+            app.UseForwardedHeaders(options);
+
+
             /*=================== DB Migrations + Roles ===================*/
             using (var scope = app.Services.CreateScope())
             {
@@ -344,13 +364,7 @@ await context.HttpContext.Response.WriteAsJsonAsync(new
 
             /*=================== Middleware Pipeline ===================*/
 
-            app.UseForwardedHeaders(new ForwardedHeadersOptions
-            {
-                ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto,
-                // ??? ?????? ???? ??????? ??? ?? Nginx ????? ?????? (mooo.com) ??????????? (https) ???? ????
-                KnownNetworks = { },
-                KnownProxies = { }
-            });
+
 
             app.UseStaticFiles();
             app.UseRouting();