diff --git a/bootstrap/app.php b/bootstrap/app.php
index 1657d4e..43c46a5 100644
--- a/bootstrap/app.php
+++ b/bootstrap/app.php
@@ -14,7 +14,7 @@
         health: '/up',
     )
     ->withMiddleware(function (Middleware $middleware): void {
-        //
+        $middleware->trustProxies(at: '*');
     })
     ->withExceptions(function (Exceptions $exceptions): void {
         // AJAX kérések esetén mindig JSON választ adunk, egyedi referencia kóddal
diff --git a/routes/api.php b/routes/api.php
index 5fac03a..81a378d 100644
--- a/routes/api.php
+++ b/routes/api.php
@@ -15,6 +15,14 @@
 |
 */
 
+Route::get('/debug-headers', function (\Illuminate\Http\Request $request) {
+    return response()->json([
+        'is_secure_method' => $request->secure(), // true-t kellene visszaadnia
+        'all_headers' => $request->headers->all(),
+        'server_variables' => $_SERVER,
+    ]);
+});
+
 Route::middleware('auth:api')->get('/user', function (Request $request) {
     return $request->user();
 });
diff --git a/routes/web.php b/routes/web.php
index b32cae1..e5e5bce 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -30,6 +30,13 @@
     exit();
 }
 URL::forceScheme('https');
+Route::get('/debug-headers', function (\Illuminate\Http\Request $request) {
+    return response()->json([
+        'is_secure_method' => $request->secure(), // true-t kellene visszaadnia
+        'all_headers' => $request->headers->all(),
+        'server_variables' => $_SERVER,
+    ]);
+});
 /*
 if (! in_array(strtolower(env('APP_STAGE')), ['d2dtst', 'e2etst', 'dev','local'])) {
     URL::forceScheme('https');