Support reverse proxy the NextCloud way

In some network configurations involving a reverse proxy, the base url generated by the underlying SAML library is not consistent with the way it's generated in NextCloud.

For example, it may generate `http://` urls instead of `https://` when the SSL Layer is handled by a proxy, even when NextCloud URLGenerator#getAbsoluteURL effectively generates `https://` urls.

This change setup SAML library to use the Server Protocol and Server Host as returned by the NextCloud Request object to build SAML urls properly.

Signed-off-by: Rémi Alvergnat <[email protected]>

Author: Toilal

lib/SAMLSettings.php

@@ -11,9 +11,11 @@
 use OCA\User_SAML\Db\ConfigurationsMapper;
 use OCP\DB\Exception;
 use OCP\IConfig;
+use OCP\IRequest;
 use OCP\ISession;
 use OCP\IURLGenerator;
 use OneLogin\Saml2\Constants;
+use OneLogin\Saml2\Utils;
 
 class SAMLSettings {
 	private const LOADED_NONE = 0;
@@ -77,7 +79,11 @@ public function __construct(
 		private IConfig $config,
 		private ISession $session,
 		private ConfigurationsMapper $mapper,
+		private IRequest $request,
 	) {
+		Utils::setSelfProtocol($this->request->getServerProtocol());
+		Utils::setSelfHost($this->request->getServerHost());
+		Utils::setProxyVars(true);
 	}
 
 	/**