-1

I've configured a custom domain and certificate and hooked up the cloud functions api to my actions and this works fine.

Endpoints work over both https and http.

But I'd like to enforce https only. Something like "FORCE_HTTPS: true" in the static buildpack. Is there someway that I can do this?

Cœur
  • 37,241
  • 25
  • 195
  • 267
satolizard
  • 199
  • 2
  • 3

1 Answers1

1

You should get an X-Forwarded-Url header in the action itself that you could inspect to force HTTPS. Using that in conjunction with secure actions via the web_key annotation should make it enforceable.

In the future, the API Gateway may be able to enforce this for you via the configuration specified in the Open API doc.

Matt Hamann
  • 1,488
  • 12
  • 24