fix(auth): oidc redirect does not respect https protocol (#1763)

packages/common/src/url.ts

@@ -4,8 +4,16 @@ export const removeTrailingSlash = (path: string) => {
   return path.at(-1) === "/" ? path.substring(0, path.length - 1) : path;
 };
 
-export const extractBaseUrlFromHeaders = (headers: ReadonlyHeaders): `${string}://${string}` => {
-  let protocol = headers.get("x-forwarded-proto") ?? "http";
+export const extractBaseUrlFromHeaders = (
+  headers: ReadonlyHeaders,
+  fallbackProtocol: "http" | "https" = "http",
+): `${string}://${string}` => {
+  let protocol = headers.get("x-forwarded-proto");
+
+  // If the protocol is not set or an empty string
+  if (!protocol) {
+    protocol = fallbackProtocol;
+  }
 
   // @see https://support.glitch.com/t/x-forwarded-proto-contains-multiple-protocols/17219
   if (protocol.includes(",")) {