wip

app/Http/Middleware/SetCloudfrontHeaders.php

@@ -0,0 +1,31 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class SetCloudfrontHeaders
+{
+    protected string $header = 'Cloudfront-Forwarded-Proto';
+
+    /**
+     * Handle an incoming request.
+     *
+     * @param \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response) $next
+     */
+    public function handle(Request $request, Closure $next): Response
+    {
+        if ($request->hasHeader($this->header)) {
+            $request->headers->add([
+                'X-Forwarded-Proto' => $request->header($this->header),
+                'X-Forwarded-Port' => '443',
+            ]);
+        }
+
+        return $next($request);
+    }
+}

bootstrap/app.php

@@ -2,6 +2,7 @@
 
 declare(strict_types=1);
 
+use App\Http\Middleware\SetCloudfrontHeaders;
 use Filament\Facades\Filament;
 use Illuminate\Console\Scheduling\Schedule;
 use Illuminate\Foundation\Application;
@@ -19,7 +20,8 @@
         health: '/up',
     )
     ->withMiddleware(function (Middleware $middleware) {
-        $middleware->trustProxies('*');
+        $middleware->trustProxies('*')
+            ->append(SetCloudfrontHeaders::class);
 
         // Fix for `Route [login] not defined` exception
         // @see https://github.com/filamentphp/filament/discussions/5226#discussioncomment-10555366