fix datasets#107: add https redirection in production mode

augusto-herrmann · Sep 20, 2021 · 7c9b7b9 · 7c9b7b9
1 parent 9adc9bc
commit 7c9b7b9
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/index.js b/index.js
@@ -26,6 +26,16 @@ app.use(express.static(path.join(__dirname, 'public')));
 if ('development' === process.env.NODE_ENV) {
     app.use(errorhandler());
 }
+else { // production only
+    // handle https redirect
+    function ensureSecure(req, res, next){
+        if(req.secure){
+        // OK, continue
+        return next();
+        };
+        res.redirect('https://' + req.hostname + req.url);
+    }
+    app.all('*', ensureSecure);
 }
 
 app.get('/', routes.index);

diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "publicbodies",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "A database of public bodies such as government departments, ministries etc.",
   "main": "site/make.js",
   "directories": {