c9f1437860
CI / backend (pull_request) Has been cancelled
CI / frontend (pull_request) Has been cancelled
CI / format (pull_request) Has been cancelled
CI / db-tests (pull_request) Has been cancelled
Security / secrets (pull_request) Successful in 6s
Security / dependencies (pull_request) Successful in 1m12s
Security / sast (pull_request) Failing after 5s
The SPA nginx overwrote the reverse proxy's X-Forwarded-Proto with $scheme (http on the traefik->frontend hop), so the API built http:// OAuth redirects that Google rejects. Map the incoming proto through (fallback to $scheme for direct access). Needed for login via https://inboxintel.cesnimda.uk behind traefik. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>