fix redirect loop

qbreader · Oct 12, 2024 · ada566a · ada566a
1 parent bd039ef
commit ada566a
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/index.js b/index.js
@@ -23,6 +23,8 @@ if (process.env.NODE_ENV !== 'production') {
   app.use(morgan('dev'));
 }
 
+// https://stackoverflow.com/questions/10348906/how-to-know-if-a-request-is-http-or-https-in-node-js
+app.enable('trust proxy');
 app.use(hostnameRedirection);
 app.use(httpsEnforcement);
 

diff --git a/server/https-enforcement.js b/server/https-enforcement.js
@@ -2,7 +2,7 @@ export default function httpsEnforcement (req, res, next) {
   const hostname = req.hostname;
 
   // Use HTTPS if not on localhost
-  if (req.protocol !== 'https' && !['localhost', '127.0.0.1'].includes(hostname)) {
+  if (!req.secure && !['localhost', '127.0.0.1'].includes(hostname)) {
     return res.redirect(301, `https://${hostname}${req.originalUrl}`);
   }