force https on request (rebased version)

runtime/fresh/middlewares/2_stateBuilder.ts

@@ -20,6 +20,7 @@ import {
   STATE_CONTEXT_KEY,
 } from "../../../observability/otel/context.ts";
 import { AppManifest, DecoSiteState, DecoState } from "../../../types.ts";
+import { forceHttps } from "deco/utils/http.ts";
 import { buildInvokeFunc } from "../../../utils/invoke.server.ts";
 import { createServerTimings } from "../../../utils/timings.ts";
 import { setLogger } from "../../fetch/fetchLog.ts";
@@ -200,7 +201,7 @@ export const buildDecoState = <TManifest extends AppManifest = AppManifest>(
     const { resolver } = await liveContext.runtime;
     const ctxResolver = resolver
       .resolverFor(
-        { context, request },
+        { context, request: forceHttps(request) },
         {
           monitoring: context.state.monitoring,
         },

runtime/fresh/routes/entrypoint.tsx

@@ -6,7 +6,7 @@ import { Handler } from "../../../blocks/handler.ts";
 import { Page } from "../../../blocks/page.tsx";
 import { PageContext } from "../../../engine/block.ts";
 import { DecoSiteState, DecoState, Flag } from "../../../types.ts";
-import { setCSPHeaders } from "../../../utils/http.ts";
+import { forceHttps, setCSPHeaders } from "../../../utils/http.ts";
 
 export interface RouterContext {
   pagePath: string;
@@ -73,7 +73,7 @@ const innerHandler = async (
 
   return setCSPHeaders(
     req,
-    await handler(req, ctx as ConnInfo),
+    await handler(forceHttps(req), ctx as ConnInfo),
   );
 };
 

utils/http.ts

@@ -206,3 +206,13 @@ export const allowCorsForOrigin = (
 });
 
 export { readFromStream } from "../clients/withManifest.ts";
+
+export const forceHttps = (req: Request) => {
+  let httpsReq = req;
+  if (req.url.startsWith("http:") && !req.url.includes("localhost")) {
+    const url = new URL(req.url);
+    url.protocol = "https:";
+    httpsReq = new Request(url, req);
+  }
+  return httpsReq;
+};