Secure cookies and redirects break behind TLS-terminating proxy, forwarded-header support plugin
A Ktor server deployed behind a TLS-terminating reverse proxy may see inbound requests as plain HTTP. Features that depend on the original client-facing scheme and host, such as secure cookies and absolute redirects, can behave differently from local direct testing where no proxy rewrites the connection. The forwarded-header support plugin is the documented
