X-Forwarded-Proto / always

cabinetoffice · Jan 17, 2025 · ff7638f · ff7638f
1 parent 98f99fb
commit ff7638f
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/GenderPayGap.WebUI/Program.cs b/GenderPayGap.WebUI/Program.cs
@@ -135,7 +135,7 @@ private static void ConfigureServices(IServiceCollection services)
             services.AddAntiforgery(
                 options =>
                 {
-                    options.Cookie.SecurePolicy = CookieSecurePolicy.None;
+                    options.Cookie.SecurePolicy = CookieSecurePolicy.Always;
                 });
 
             DataProtectionKeysHelper.AddDataProtectionKeyStorage(services);

diff --git a/terraform/cloudfront.tf b/terraform/cloudfront.tf
@@ -49,6 +49,11 @@ resource "aws_cloudfront_distribution" "distribution" {
       origin_protocol_policy = "http-only"
       origin_ssl_protocols = ["TLSv1.2"]
     }
+
+    custom_header {
+      name  = "X-Forwarded-Proto"
+      value = "https"
+    }
   }
 
   price_class = "PriceClass_100"