From eda0c87766439504688659b1ba5b2dd7cd242d80 Mon Sep 17 00:00:00 2001
From: "Tizian.Breuch" <breuchtizian@lebk24.de>
Date: Thu, 7 Aug 2025 14:00:22 +0200
Subject: [PATCH] prgram cs

---
 Webshop.Api/Program.cs | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/Webshop.Api/Program.cs b/Webshop.Api/Program.cs
index 9fa2c74..9137d14 100644
--- a/Webshop.Api/Program.cs
+++ b/Webshop.Api/Program.cs
@@ -284,12 +284,19 @@ using (var scope = app.Services.CreateScope())
 }
 
 // Middleware für Reverse-Proxies
-app.UseForwardedHeaders(new ForwardedHeadersOptions
+var forwardedHeadersOptions = new ForwardedHeadersOptions
 {
     ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto
-});
+};
+// Vertraue jedem Proxy, da die App in einem kontrollierten Netzwerk (Docker) läuft.
+// In einer komplexeren Produktionsumgebung könnten hier spezifische IP-Adressen
+// oder Netzwerke eingetragen werden.
+forwardedHeadersOptions.KnownNetworks.Clear();
+forwardedHeadersOptions.KnownProxies.Clear();
 
-// << NEU: Statische Dateien aus wwwroot bereitstellen (z.B. /uploads/xyz.jpg) >>
+app.UseForwardedHeaders(forwardedHeadersOptions);
+
+// << Statische Dateien aus wwwroot bereitstellen (z.B. /uploads/xyz.jpg) >>
 app.UseStaticFiles();
 
 // Swagger/SwaggerUI für API-Dokumentation aktivieren