set schema

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2024-03-21 22:51:55 +01:00
parent 3afe386e18
commit b42eb0706d
1 changed files with 3 additions and 1 deletions
--- a/authentik/brands/middleware.py
+++ b/authentik/brands/middleware.py
@ -60,7 +60,9 @@ class BrandCSPHeaderMiddleware:
    def get_csp(self, request: HttpRequest) -> str:
        brand: "Brand" = request.brand
        elements = self.default_csp_elements.copy()
-        elements["frame-ancestors"] = [f"https://{brand.domain}"]
+        elements["frame-ancestors"] = [
+            f"{'https' if request.is_secure() else 'http'}://{brand.domain}"
+        ]
        return ";".join(f"{attr} {" ".join(value)}" for attr, value in elements.items())

    def __call__(self, request: HttpRequest) -> HttpResponse: