Allow HTTP for one route only

Level 102

Could you start by explaining why this is needed? Perhaps there is a better way :)

Level 1

Hardware that does not support port ssl will call this endpoint

Level 34

@chrismerron what I would do instead is to allow port 80 and 443 to be accessible on your nginx and edit your AppServiceProvider like this:


public function boot()
{
        if($this->app->request->getRequestUri() != '/my-http-route') {
            URL::forceSchema('https');
        }
}

Level 34

And don't forget to import the URL class :)

Sinnbeck

Level 102

Just be aware that this will allow static content to be served over http as well then :) Maybe not a problem, but just informing you of it :)

1 like

Level 1

This solution will work, but perhaps it's better via the server and Nginx?

Level 34

Agree with @sinnbeck

@chrismerron maybe you can share why you need this one route to be served on HTTP in the first place?

Level 1

Yep, it's a limitation of hardware that call this route that do not support HTTPs

Sinnbeck

Level 102

Can you post your current nginx config for the site?

Level 34

how about this:

# http
server {
    listen 80;
    #other configs here

    location / {
        rewrite ^ https://$host$request_uri? permanent;
    }

    location /my-route {
    }
}

# https
server {
    listen 443;
    #other configs here

    location / {
    }

    location /my-route {
        rewrite ^ http://$host$request_uri? permanent;
    }
}

Level 1

I can't link to it it as I'm not allowed to include links the first day I sign up :(

Level 1

That looks helpful @neilstee thanks

1 like