How to force SSL in all routes at once?

Honza Kuchař

Hi there!

Usually I want to have:

non-ssl connections on localhost
ssl connection on production. (also enabled HTTP Strict Transport Security, currently I add .htaccess to achieve that)

Do I need to have two routers to just generate routes with different flag (https://doc.nette.org/…tion/routing#…

Thanks folks!

Jan Tvrdík

One router should be enough, see https://github.com/…rFactory.php for example.

Last edited by Jan Tvrdík (2014-11-16 14:07)

Honza Kuchař

Thanks! I thought there is something like one-line solution.

bazo

easiest is to use a self signed cert on localhost

Filip Procházka

My solution is to have it conditional for production

class RouterFactory
{
	private $productionMode;

	public function __construct($productionMode)
	{
		$this->productionMode = $productionMode;
	}

	public function createRouter()
	{
		$router = new RouteList();
		$flags = $this->productionMode ? Route::SECURED : 0;

		$router[] = new Route('<presenter>/<action>[/<id>]', 'Homepage:default', $flags);

		return $router;
	}

}

Last edited by Filip Procházka (2014-11-17 17:04)

Honza Kuchař

I don't like this way, because I wanted to have it as one-line code. But I acknowledge that on some sites they use encryption just for few requests. (e.g. seznam.cz)

Don't you think there should be something like enable HSTS in Nette?

Honza Kuchař

Created new thread for this.