@indiekit/indiekit/lib/middleware/force-https.js

The little server that connects your website to the independent web

/**
 * Redirect HTTP requests to HTTPS (typically on Heroku)
 * @type {import("express").RequestHandler}
 */
export function forceHttps(request, response, next) {
  const protocol = request.headers["x-forwarded-proto"];

  if (protocol && protocol !== "https") {
    console.info("Redirecting request to https");
    // 302 temporary. This is a feature that can be disabled
    return response.redirect(
      302,
      "https://" + request.get("Host") + request.originalUrl,
    );
  }

  next();
}