Cookie Middleware CookieAuthenticationHandler not redirecting correctly

[h3smith]

Out solution is sitting behind a load balancer that terminates the SSL connection. .NET Core app just handles the HTTP request.

When this is an SSL connection on a non-standard port https://something:8443, when the redirect occurs, it is pushing to http://something:8443, disregarding the HTTPS scheme.

The CookieAuthenticationHandler is not looking to validate the scheme before performing the redirect on an authentication failure.

[Tratcher]

Duplicate: #929

[h3smith]

For anyone else with the issue,

app.Use((context, next) =>
{
  context.Request.Scheme = "https";
  return next();
});

Fixes the problem. We disable this with an environment variable if we need to use port 80.