.gitignore

@@ -1,3 +1,11 @@
+node_modules/
+lib/
+dist/
+temp/
+*.sppkg
+.heft/
+sharepoint/solution/
+.vs/
 .env
 .env.local
 .env.example
@@ -6,4 +14,3 @@
 **/bin/
 **/obj/
 .DS_Store
-.vs/

backend/src/Tnsu.ApprovalRoute.Api/Program.cs

@@ -1,6 +1,7 @@
 using System.Text.Json.Serialization;
 using Extensions.Hosting.AsyncInitialization;
 using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.HttpOverrides;
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Hosting;
 using Microsoft.OpenApi;
@@ -15,6 +16,15 @@ const string CorsPolicyName = "Frontend";
 
 var builder = WebApplication.CreateBuilder(args);
 
+builder.Services.Configure<ForwardedHeadersOptions>(options =>
+{
+    options.ForwardedHeaders =
+        ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto;
+    
+    options.KnownNetworks.Clear();
+    options.KnownProxies.Clear();
+});
+
 var corsAllowedOrigins = builder.Configuration.GetSection("Cors:AllowedOrigins").Get<string[]>() ?? [];
 builder.Services.AddCors(options =>
 {
@@ -61,6 +71,8 @@ builder.Services.ConfigureHttpJsonOptions(o => o.SerializerOptions.Converters.Ad
 
 var app = builder.Build();
 
+app.UseForwardedHeaders();
+
 app.MapOpenApi();
 
 app.MapScalarApiReference(options =>