@malcolmsparks: what do you think would be the best way to integrate this ? i’m tempted to make a proxy.clj with an interceptor that deals with proxy-specific headers

but the easiest solution would probably be a few conditions in security.clj

but if we ensure that :scheme is properly set by the proxy interceptor, things such as util/get-host-origin automatically work as expected