mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-09 21:10:59 +00:00
Every browser-facing redirect in the OIDC login/callback routes was built from req.url. Behind a reverse proxy that doesn't forward the original host, that reflects the address the app process was addressed as inside the container rather than the public domain, sending users to an unreachable internal URL after login. Route every redirect through the trusted, operator-set NEXT_PUBLIC_APP_URL instead, matching the convention the Withings integration already uses.