From ed2f843815579939b115b7ecbca27f8d3a78e402 Mon Sep 17 00:00:00 2001
From: kuaifan <aipaw@live.cn>
Date: Sat, 4 Apr 2026 07:47:30 +0800
Subject: [PATCH] =?UTF-8?q?feat(middleware):=20=E4=BC=98=E5=8C=96=20WebApi?=
 =?UTF-8?q?=20=E4=B8=AD=E7=9A=84=20HTTPS=20=E5=BC=BA=E5=88=B6=E8=AE=BE?=
 =?UTF-8?q?=E7=BD=AE=E9=80=BB=E8=BE=91?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 app/Http/Middleware/WebApi.php | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/app/Http/Middleware/WebApi.php b/app/Http/Middleware/WebApi.php
index a0d09a9a6..3c3028caf 100644
--- a/app/Http/Middleware/WebApi.php
+++ b/app/Http/Middleware/WebApi.php
@@ -25,6 +25,14 @@ class WebApi
         RequestContext::set('start_time', microtime(true));
         RequestContext::set('header_language', $request->header('language'));
 
+        // 强制 https
+        $APP_SCHEME = env('APP_SCHEME', 'auto');
+        if (in_array(strtolower($APP_SCHEME), ['https', 'on', 'ssl', '1', 'true', 'yes'], true)) {
+            $request->server->set('HTTPS', 'on');
+            $request->headers->set('X-Forwarded-Proto', 'https');
+            $request->setTrustedProxies([$request->getClientIp()], $request::HEADER_X_FORWARDED_PROTO);
+        }
+
         // 更新请求的基本URL
         RequestContext::updateBaseUrl($request);
 
@@ -56,12 +64,6 @@ class WebApi
             }
         }
 
-        // 强制 https
-        $APP_SCHEME = env('APP_SCHEME', 'auto');
-        if (in_array(strtolower($APP_SCHEME), ['https', 'on', 'ssl', '1', 'true', 'yes'], true)) {
-            $request->setTrustedProxies([$request->getClientIp()], $request::HEADER_X_FORWARDED_PROTO);
-        }
-
         // 执行下一个中间件
         $response = $next($request);