heierbtc/mynode
1
0
Fork 1
mirror of https://github.com/mynodebtc/mynode.git synced 2024-12-24 13:38:11 +00:00
Code Issues Projects Releases Wiki Activity

Fix issue where Force HTTPS was ignored

Browse Source
This commit is contained in:
Taylor Helsper 2021-07-04 22:05:37 -05:00
parent a5bc98c510
commit 347fb1b607
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
rootfs/standard/var/www/mynode/mynode.py
View File

@ -677,9 +677,11 @@ def internal_error(error):
# Check for forced HTTPS
@app.before_request
def before_request():
if is_https_forced():
scheme = request.headers.get('X-Forwarded-Proto')
if scheme and scheme == 'http' and request.url.startswith('http://'):
# Check for HTTPS forced (only enforce once drive mounted and stable state)
# Otherwise, web GUI may be inaccessible if error occurs (NGINX needs drive for cert)
if is_https_forced() and get_mynode_status() == STATE_STABLE:
if request.url and request.url.startswith('http://'):
app.logger.info("REDIRECTING")
url = request.url.replace('http://', 'https://', 1)
code = 302
app.logger.info("Redirecting to HTTPS ({})".format(url))