How to redirect to HTTPS with .htaccess on Heroku Cedar stack

前端 未结 3 1700
借酒劲吻你
借酒劲吻你 2020-12-05 10:39

I\'m new to cloud hosting...

I\'m working on a PHP web app that\'s hosted on Heroku as a \"Cedar\" app. Heroku offers \"piggy back\" SSL to all their subdomains, so

3条回答
  •  情歌与酒
    2020-12-05 11:07

    After spending all day on this, I figured it out!!

    The issue is eloquently summarized here.

    Bottom line: Heroku sets its own custom header to indicate the ORIGINAL scheme of the traffic (before SSL terminated at the load balancer).

    So THIS works in an .htaccess file on Heroku

    ##Force SSL 
    
    #Normal way (in case you need to deploy to NON-heroku)
    RewriteCond %{HTTPS} !=on
    
    #Heroku way
    RewriteCond %{HTTP:X-Forwarded-Proto} !https 
    
    #If neither above conditions are met, redirect to https
    RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
    

    The secret sauce is the line with HTTP:X-Forwarded-Proto.

    Hope this helps someone else having the same issues! At the time of writing this there is ZERO documentation on this.

提交回复
热议问题