mirror of
https://github.com/sudoxnym/habitica.git
synced 2026-08-01 15:31:16 +00:00
#1422 force ssl
This commit is contained in:
parent
86552c9296
commit
ab756a8634
2 changed files with 12 additions and 0 deletions
|
|
@ -1,6 +1,17 @@
|
|||
var nconf = require('nconf');
|
||||
var _ = require('lodash');
|
||||
|
||||
module.exports.forceSSL = function(req, res, next){
|
||||
var baseUrl = nconf.get("BASE_URL");
|
||||
// Note x-forwarded-proto is used by Heroku & nginx, you'll have to do something different if you're not using those
|
||||
if (req.headers['x-forwarded-proto'] && req.headers['x-forwarded-proto'] !== 'https'
|
||||
&& nconf.get('NODE_ENV') === 'production'
|
||||
&& baseUrl.indexOf('https') === 0) {
|
||||
return res.redirect(baseUrl + req.url);
|
||||
}
|
||||
next()
|
||||
}
|
||||
|
||||
module.exports.splash = function(req, res, next) {
|
||||
if (req.url == '/' && !req.headers['x-api-user'] && !req.headers['x-api-key'] && !(req.session && req.session.userId))
|
||||
return res.redirect('/static/front')
|
||||
|
|
|
|||
|
|
@ -72,6 +72,7 @@ app.set("view engine", "jade");
|
|||
app.use(express.favicon());
|
||||
app.use(express.logger("dev"));
|
||||
app.use(middleware.cors);
|
||||
app.use(middleware.forceSSL);
|
||||
app.use(express.bodyParser());
|
||||
app.use(require('connect-assets')());
|
||||
app.use(express.methodOverride());
|
||||
|
|
|
|||
Loading…
Reference in a new issue