express-force-https-schema

configurable express middleware that forces https schema based on x-forwarded-proto header

Usage no npm install needed!

<script type="module">
  import expressForceHttpsSchema from 'https://cdn.skypack.dev/express-force-https-schema';
</script>

README

express-force-https-schema

Installation

$ npm install express-force-https-schema

Description

Very simple configurable express middleware that forces https schema based on x-forwarded-proto header.

The x-forwarded-proto is used by Heroku, AWS ELB and others to tell which schema the request was made with.

Usage

import forceHttpsSchema from "express-force-https-schema";

const app = express();

app.use(
  forceHttpsSchema({
    enabled: process.env.FORCE_HTTPS === "true",
    skipUserAgents: /ELB-HealthChecker/i
  })
);

Options

Key	Default
enabled	true
userAgentHeader	user-agent
schemaHeader	x-forwarded-proto
skipUserAgents	null

Test

npm test