Proposal: auto redirect to https

[edwardhorsford]

I've just noticed that https urls work on herokuapp.com. This is ace.

Proposal: if running on heroku, autoredirect app from http to https.

Any downsides to doing this?

Edit: this is the code I use on my personal site to redirect:

function forceSSL (req, res, next) {
    if (req.headers['x-forwarded-proto'] !== 'https') {
        return res.redirect(301, ['https://', req.get('Host'), req.url].join(''));
    }
    return next();
};

[joelanman]

sounds good to me - dont think you need to return next() - just call it?

[edwardhorsford]

I think I've got it as middleware high up so all my requests go through it.

[joelanman]

http://expressjs.com/en/guide/using-middleware.html

[edwardhorsford]

fixed by #188