CODEWITHSUNDEEP
phplaravelhttps
Alana Storm
Alana Storm

Reputation: 166086

Test that All Routes are Configred Secure

Is there anyway to force Laravel to treat all your routes as HTTPs irrespective of what you've configuration in routes.php?

That is, I know I can configure a route securely withsomething like this

Route::get('/logout', array('https', 'as'=>'logout'

What I'd like is for the https to be added to all routes automatically, even if a developer does this

Route::get('/logout', array('https', 'as'=>'logout'

ensuring a secure route if a developer fails to specify a route as secure.

Failing that, (before I dig into it myself) is there a known programmatic way to get a list of all routes and check if they're secure or not?

Upvotes: 0

Views: 108

Answers (2)

Antonio Carlos Ribeiro
Antonio Carlos Ribeiro

Reputation: 87749

You can force them by creating a before filter to check if the current request is secure or not:

App::before(function($request)
{
    if( ! Request::secure())
    {
        return Redirect::secure(Request::fullUrl());
    }
});

You also can create a filter:

Route::filter('force.ssl', function()
{
    if( ! Request::secure())
    {
        return Redirect::secure(Request::fullUrl());
    }
});

And apply to a group of routes:

Route::group(['before' => 'force.ssl', function() {

    Route::get('test', 'Controller@action');

});

You can still check them all one by one this way:

$router = App::make('router');

foreach($router->getRoutes() as $route)
{
    var_dump($route->secure());
}

Upvotes: 1

nesl247
nesl247

Reputation: 106

If you are trying to make all routes secure, why not just add a permanent redirect in Apache or Nginx from HTTP to HTTPS?

Then you bypass having to deal with specifying all of that in your routes?

Otherwise if you are dead set on doing it like you are now, I believe you can do a Route::when() to check if it is secure or not.

Route::when('*', function($route, $request)
{
    if( ! $request->secure())
    {
        return Redirect::secure($request->path());
    }
}

Upvotes: 1

Related Questions