Ensure auth header url uses correct protocol

opengovsg · Jan 18, 2019 · c8a04a9 · c8a04a9
1 parent 895fcbc
commit c8a04a9
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/lib/express.js b/lib/express.js
@@ -133,7 +133,7 @@ function config (app, { showLoginPage, serviceProvider, idpConfig, port }) {
         ? `${req.hostname}:${port}`
         : req.hostname
 
-      authHeaderFields.url = `http://${hostPort}${req.baseUrl}${req.path}`
+      authHeaderFields.url = `${req.protocol}://${hostPort}${req.baseUrl}${req.path}`
       authHeaderFields.requestedAttributes = req.query.attributes
 
       if (verifyMyInfoSignature(authHeaderFields.signature, authHeaderFields)) {

diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opengovsg/mockpass",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "A mock SingPass/CorpPass server for dev purposes",
   "main": "index.js",
   "bin": {