public/homebrewery
1
0
Fork 0
mirror of https://github.com/stolksdorf/homebrewery.git synced 2025-12-22 16:51:29 +00:00
Code Issues Releases Wiki Activity

Added middleware to force all routes to be https

Browse Source
This commit is contained in:
Scott Tolksdorf
2018-11-30 16:29:05 -05:00
parent 448ea5cf5c
commit 21b83ead88
2 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
server.js
View File

@@ -6,6 +6,7 @@ const app = express();
app.use(express.static(`${__dirname}/build`)); app.use(express.static(`${__dirname}/build`));
app.use(require('body-parser').json({ limit: '25mb' })); app.use(require('body-parser').json({ limit: '25mb' }));
app.use(require('cookie-parser')()); app.use(require('cookie-parser')());
app.use(require('./server/forcessl.mw.js'));
const config = require('nconf') const config = require('nconf')
.argv() .argv()
@@ -23,7 +24,7 @@ mongoose.connection.on('error', ()=>{
}); });
//Account MIddleware //Account Middleware
app.use((req, res, next)=>{ app.use((req, res, next)=>{
if(req.cookies && req.cookies.nc_session){ if(req.cookies && req.cookies.nc_session){
try { try {

7
server/forcessl.mw.js Normal file
View File

@@ -0,0 +1,7 @@
module.exports = (req, res, next) => {
if(process.env.NODE_ENV === 'local') return next();
if(req.header('x-forwarded-proto') !== 'https') {
return res.redirect(302, `https://${req.get('Host')}${req.url}`);
}
return next();
};