Force https on /2019

Author: sorah

config/force_https.conf

@@ -0,0 +1,3 @@
+if ($http_x_forwarded_proto = "http") {
+  rewrite ^(.*)$ https://$http_host$1 permanent;
+}

config/nginx.conf.erb

@@ -45,6 +45,7 @@ http {
       }
 
       proxy_set_header Host $http_x_rko_host;
+      proxy_set_header X-Forwarded-Proto $http_x_rko_xfp;
       proxy_pass http://localhost:<%= ENV["PORT"] %>;
     }
   }
@@ -273,6 +274,7 @@ http {
     }
 
     location ~ ^/2019(.*) {
+        include force_https.conf;
         proxy_pass http://rubykaigi2019.herokuapp.com;
     }
 
@@ -291,6 +293,7 @@ http {
     # current rubykaigi
     location = / {
         return 302 http://rubykaigi.org/2018;
+        # return 302 https://rubykaigi.org/2019;
     }
 
     location ~* /([0-9][0-9][0-9][0-9])?(images|javascripts|stylehseets)/ {

spec/rubykaigi_org_spec.rb

@@ -162,5 +162,22 @@
     end
   end
 
+  describe "/2019" do
+    context "https" do
+      let(:res) { http_get("https://rubykaigi.org/2019") }
+      it "should be 200" do
+        expect(res.code).to eq("200")
+      end
+    end
+
+    context "http" do
+      let(:res) { http_get("https://rubykaigi.org/2019", proto: 'http') }
+      it "should force https" do
+        expect(res.code).to eq("301")
+        expect(res["location"]).to eq("https://rubykaigi.org/2019")
+      end
+    end
+  end
+
   # TODO consider ja locale case
 end

spec/support/http_client.rb

@@ -3,15 +3,20 @@
 require 'uri'
 
 module Helpers
-  def http_get(url)
+  def http_get(url, proto: 'https')
     uri = URI.parse(url)
     target = URI.parse(ENV.fetch('TARGET_HOST', url))
 
     http = Net::HTTP.new(target.host, target.port)
     http.use_ssl = true if target.scheme == 'https'
 
     http.start do
-      http.get(uri.path, {'x-rko-host' => uri.host, 'Host' => target.host})
+      headers = {
+        'Host' => target.host,
+        'x-rko-host' => uri.host,
+        'x-rko-xfp' => proto,
+      }
+      http.get(uri.path, headers)
     end
   end
 end