Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enforce HTTPS access if swagger definition disallows http #454

Open
surajbarkale opened this issue Oct 11, 2018 · 1 comment
Open

Enforce HTTPS access if swagger definition disallows http #454

surajbarkale opened this issue Oct 11, 2018 · 1 comment
Assignees

Comments

@surajbarkale
Copy link

In our swagger definition, we only have https scheme enabled. However, when testing with Cloud Endpoints for App Engine Flexible, we found that the esp happily accepts http requests and passes on to our service.

Can you please redirect http requests to https if no http access is specified in swagger definition?

@qiwzhang
Copy link
Contributor

It is a reasonable feature request. we can add start_esp flag to add this line in Nginx config

return 301 https://$host$request_uri;

But it is not easy to for FLEX. Users can not use start_esp flags directly.

@qiwzhang qiwzhang self-assigned this May 6, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants