Skip to content
  • orangain's avatar
    Avoid redirect loop in HTTPSRedirect middleware (#1058) · ef82f3e0
    orangain authored
    In HTTPSRedirect and similar middlewares, determining if redirection is
    needed using `c.IsTLS()` causes redirect loop when an application is running
    behind a TLS termination proxy, e.g. AWS ELB.
    
    Instead, I believe, redirection should be determined by
    `c.Scheme() != "https"`. This works well even behind a TLS termination proxy.
    ef82f3e0