如何仅在Heroku https上制作python？ [英] How to make python on Heroku https only?

问题描述

我在Heroku（雪松堆栈）上有python / django应用程序，并希望仅通过https访问。我启用了ssl捎带选项，并可以通过https连接到它。

I have python/django app on Heroku (Cedar stack) and would like to make it accessible over https only. I have enabled the "ssl piggyback"-option, and can connect to it via https.

但是，禁用http访问或重定向到https的最佳方法是什么？

But what is the best way to disable http access, or redirect to https?

推荐答案

将@CraigKerstiens和@allanlei的答案结合到我测试过的东西中，并进行验证。当请求为ssl时，Heroku将HTTP_X_FORWARDED_PROTO设置为https，我们可以使用它来检查：

Combining the answer from @CraigKerstiens and @allanlei into something I have tested, and verified to work. Heroku sets the HTTP_X_FORWARDED_PROTO to https when request is ssl, and we can use this to check:

from django.conf import settings
from django.http import HttpResponseRedirect


class SSLMiddleware(object):

    def process_request(self, request):
        if not any([settings.DEBUG, request.is_secure(), request.META.get("HTTP_X_FORWARDED_PROTO", "") == 'https']):
            url = request.build_absolute_uri(request.get_full_path())
            secure_url = url.replace("http://", "https://")
            return HttpResponseRedirect(secure_url)

这篇关于如何仅在Heroku https上制作python？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！