Force ssl (just a redirect, depends on x-forwarded-proto via heroku's ngnix

This commit is contained in:
Tyler Renelle 2012-10-11 16:22:19 -04:00
parent 2c6288e997
commit 17914586f4
2 changed files with 15 additions and 0 deletions

View file

@ -36,6 +36,14 @@ server = http.createServer(expressApp);
module.exports = server;
if (process.env.NODE_ENV !== 'production') {
expressApp.all('*', function(req, res, next) {
if (req.headers['x-forwarded-proto'] !== 'https') {
return res.redirect('https://' + req.headers.host + req.url);
}
});
}
derby.use(require('racer-db-mongo'));
store = derby.createStore({

View file

@ -23,6 +23,13 @@ expressApp = express()
server = http.createServer expressApp
module.exports = server
# Force SSL
# Set before other routes, as early as possible
if process.env.NODE_ENV!='production'
expressApp.all '*', (req, res, next) ->
if req.headers['x-forwarded-proto']!='https'
res.redirect('https://'+req.headers.host+req.url)
derby.use(require 'racer-db-mongo')
store = derby.createStore
db: {type: 'Mongo', uri: process.env.NODE_DB_URI}