SecureSocial on Play 1.2.x behind Apache

Question

I run SecureSocial on a Play 1.2.x installation (on port :9000). Access to the application is via Apache httpd running on port :80, which will then forward the requests.

As for SecureSocial, the URL in the request is now localhost:9000 (see securesocial.provider.OAuth2Provider.doAuth(Map<String, Object>):111), the authentification call will fail.

I look for a clever solution to this problem which doesn't involve

• Running Play not in front of httpd
• Hacking SecureSocial

Answer 1

As per discussion on the Play Mailinglist using the solution provided in the Play Bugtracker:

Set, in application.conf, the parameter XForwardedSupport to all, or a list of allowed proxies.