express-ssl
express-ssl enforces SSL for Express apps.
Use
Simply require and use the function exported by this module:
var ssl = ;var app = ;app;
The function requires an optional object of options:
disabled
: (defaultfalse
) Iftrue
, this middleware will allow all requests through.trustProxy
: (defaultfalse
) Iftrue
, trust thex-forwarded-proto
header. If it is "https", requests are allowed through.disallow
: A function called with the request and response so that the user can handle rejecting non-SSL requests themselves.
By default, this middleware will only run when process.env.NODE_ENV
is set to
"production". Unless a disallow
function is supplied it will respond with the
status code 403 and the body "Please use HTTPS when communicating with this
server."
Thanks, Heroku
While I created and maintain this project, it was done while I was an employee of Heroku on the Human Interfaces Team, and they were kind enough to allow me to open source the work. Heroku is awesome.