1
0
mirror of https://github.com/oauth2-proxy/oauth2-proxy.git synced 2025-01-04 03:49:06 +02:00

Check X-Forwared-Proto for https (via another reverse proxy)

Signed-off-by: Josh Michielsen <github@mickey.dev>
This commit is contained in:
Josh Michielsen 2019-10-21 23:21:35 +01:00
parent 052451edef
commit dcc430f6f1

View File

@ -155,7 +155,8 @@ func (ln tcpKeepAliveListener) Accept() (c net.Conn, err error) {
func redirectToHTTPS(opts *Options, h http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
if opts.ForceHTTPS && r.TLS == nil {
proto := r.Header.Get("X-Forwarded-Proto")
if opts.ForceHTTPS && r.TLS == nil && strings.ToLower(proto) != "https" {
http.Redirect(w, r, opts.HTTPSAddress, http.StatusPermanentRedirect)
}