Function assertSecureRequest

keyserver/src/utils/security-utils.js:7–20

(req: $Request)

import { getAppURLFactsFromRequestURL } from './urls.js';

function assertSecureRequest(req: $Request) {
  const { https, proxy } = getAppURLFactsFromRequestURL(req.originalUrl);

  if (!https) {
    return;
  }
  if (
    (proxy === 'none' && req.protocol !== 'https') ||
    (proxy === 'apache' && req.get('X-Forwarded-SSL') !== 'on') ||
    (proxy === 'aws' && req.get('X-Forwarded-Proto') !== 'https')
  ) {
    throw new Error('insecure request');
  }
}

export { assertSecureRequest };