From 3754edbd272a16e0939204bce21aa85d5f13714a Mon Sep 17 00:00:00 2001
From: Ruben Beltran del Rio <jj@r.bdr.sh>
Date: Tue, 17 Feb 2026 00:05:59 +0100
Subject: Force HTTPs when useHttps is true

This is required for farm mode, as it will build urls with http://
hardcoded.
---
 package.json  | 2 +-
 src/server.js | 5 ++++-
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/package.json b/package.json
index 019dc38..731e365 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "wiki-security-oidc",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "Security plugin for Federated Wiki, using OIDC",
   "main": "src/server.js",
   "keywords": [
diff --git a/src/server.js b/src/server.js
index a833dad..3cb08da 100644
--- a/src/server.js
+++ b/src/server.js
@@ -11,7 +11,10 @@ const internals = {
         let host = wiki_domain || url;
 
         if (host.includes("//")) {
-            return `${host}`;
+            if (security_useHttps) {
+                return host.replace(/^http:\/\//, "https://");
+            }
+            return host;
         }
 
         const protocol = security_useHttps ? "https" : "http";
-- 
cgit