Granian http/https problem in Flask app

[kingkong-cmd]

I just tried replacing gunicorn with granian for my flask app. Granian sits behind NGINX. Everything works fine, except all my links are now being resolved to http instead of https. I guess because granian sees the request as http://127.0.0.1:port.

In gunicorn there is similar problem, but can be resolved by telling NGINX to add the headers below. Granian doesn't seem to treat these headers similarily as gunicorn. There is a possible fix in werkzung, but it's a bit messy, so was wondering if there is anyway to fix this on the granian/nginx level?

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;

[gi0baro]

At current time, Granian won't use X-Forwarded headers to alter wsgi.url_scheme in WSGI environ, mainly 'cause there's no mention in WSGI spec that such value should be set using the mentioned headers.
While we can discuss wether this behavior should be changed in future releases, at the time being this can probably be "fixed" by either:

• add SSL on Granian side and instruct nginx to communicate with the upstream via HTTPS
• wrap your WSGI application into an utility which sets wsgi.url_scheme to https, eg:

def app_https_forw_wrapper(environ, start_response):
    if environ.get("HTTP_X_FORWARDED_PROTO") == "https":
        environ["wsgi.url_scheme"] = "https"
    return actual_app(environ, start_response)

[kingkong-cmd]

Ok, many thanks and understood on not in spec.

I would like to avoid to deal with this on app level, since as a layman, I don't want to mess too much with stuff i don't really understand. Unless Flask guys rolls out something more integrated into settings/config.

For gunicorn it was just very convenient to address in config of nginx, so will probably just stay on gunicorn for now, and hope maybe there will be a clever option in the future for granian. Maybe it could simply be another settings parameter to enable proto (even if outside spec)? But I don't know, you're the expert.

Anyway, appreciate your work!