chore(oauth): forward proto/host (xfwd) in the dev proxy so bootstrap redirects use https

Author: bdshadow

webapp/vite.config.ts

@@ -78,6 +78,7 @@ export default defineConfig(({ mode }) => {
       exclude: ['@tginternal/library'],
     },
     server: {
+      https: { cert: 'localhost.pem', key: 'localhost-key.pem' },
       // this ensures that the browser opens upon server start
       open: true,
       host: process.env.VITE_HOST || undefined,
@@ -99,6 +100,10 @@ export default defineConfig(({ mode }) => {
             target:
               process.env.VITE_DEV_PROXY_TARGET || 'http://localhost:8080',
             changeOrigin: false,
+            // Forward X-Forwarded-Proto/Host so the backend (forward-headers-strategy: framework) builds https URLs
+            // for the /oauth2/authorize -> /oauth2/bootstrap redirect; otherwise it emits http and the https-only dev
+            // server can't load it.
+            xfwd: true,
           },
         ])
       ),