Add HTTPS image proxy and auto-fix for mixed content

src/web/user/routes.py

@@ -3529,3 +3529,44 @@ async def delete_post_image(request: Request, post_id: str):
     except Exception as e:
         logger.exception(f"Failed to delete post image: {e}")
         raise HTTPException(status_code=500, detail=str(e))
+
+
+# ==================== IMAGE PROXY FOR HTTPS ====================
+
+@user_router.get("/proxy/image/{bucket}/{path:path}")
+async def proxy_supabase_image(bucket: str, path: str):
+    """
+    Proxy Supabase storage images via HTTPS to avoid mixed content warnings.
+
+    This allows HTTPS pages to load images from HTTP Supabase storage.
+    """
+    import httpx
+    from fastapi.responses import Response
+
+    try:
+        # Build the Supabase storage URL
+        storage_url = settings.supabase_url.replace("https://", "http://").replace("http://", "http://")
+        image_url = f"{storage_url}/storage/v1/object/public/{bucket}/{path}"
+
+        # Fetch the image from Supabase
+        async with httpx.AsyncClient(timeout=30.0) as client:
+            response = await client.get(image_url)
+
+            if response.status_code != 200:
+                raise HTTPException(status_code=404, detail="Image not found")
+
+            # Return the image with proper headers
+            return Response(
+                content=response.content,
+                media_type=response.headers.get("content-type", "image/jpeg"),
+                headers={
+                    "Cache-Control": "public, max-age=31536000",
+                    "Access-Control-Allow-Origin": "*"
+                }
+            )
+
+    except httpx.TimeoutException:
+        raise HTTPException(status_code=504, detail="Image fetch timeout")
+    except Exception as e:
+        logger.error(f"Failed to proxy image {bucket}/{path}: {e}")
+        raise HTTPException(status_code=500, detail="Failed to load image")