Option to force SSL
See original GitHub issuePlatforms like heroku require to handle SSL redirect at the application level.
It would be nice to have an option on Hasura like HASURA_FORCE_SSL = true
which would force all traffic through https.
Issue Analytics
- State:
- Created 4 years ago
- Reactions:13
- Comments:14 (7 by maintainers)
Top Results From Across the Web
What is Force SSL and How to Stop Forcing SSL
log into your FASO control panel; click Secure your website with Free 1-click custom SSL (left column); click Stop Forcing SSL. This allows...
Read more >Force HTTPS Redirection - cPanel Blog
In the Domains interface in cPanel (Home >> Domains), there's an option to enable Force HTTPS Redirection from the insecure version (HTTP) ...
Read more >WP Force SSL & HTTPS SSL Redirect - Plugins
WP Force SSL helps you redirect insecure HTTP traffic to secure HTTPS and fix SSL errors without touching any code. Activate Force SSL...
Read more >How to force HTTPS for my domain? | Media Temple Community
Log into the domain control panel in Plesk. · Click Hosting Settings. p-1.png · Ensure that the Permanent SEO-safe 301... option is selected....
Read more >How to Force SSL in Joomla 3.1 - InMotion Hosting
Under the Server Settings heading, find the option labeled Force SSL. Use the drop down menu to the right of the setting to...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
This should at least be supported for the Hasura console
I think there’s still a lot of value in providing HTTPS-forcing without doing SSL/TLS termination. “People running Hasura on Heroku” is a pretty valid use case, and in that context, SSL/TLS termination is actually totally unhelpful.
I feel like the people who are most likely to be unable to run a reverse proxy to issue the redirects themselves are people running in managed environments like Heroku, anyway. I have a hard time imagining all that many use cases where people are exposing Hasura directly to the internet and want to use HTTPS, but maybe I just have tunnel vision.