File Coverage

blib/lib/Mojolicious/Plugin/SecureOnly.pm

Criterion	Covered	Total	%
statement	25	25	100.0
branch	15	20	75.0
condition	5	6	83.3
subroutine	4	4	100.0
pod	1	2	50.0
total	50	57	87.7

package Mojolicious::Plugin::SecureOnly;
use Mojo::Base 'Mojolicious::Plugin';

our $VERSION = '0.03';

has 'conf' => sub { {} };

sub register {
  my ($self, $app, $conf) = @_;

  $self->conf({%$conf, %{$app->config('SecureOnly')||{}}});

  $app->hook(before_dispatch => sub {
    my $c = shift;

    if ( $self->conf->{not_modes} ) {
      return if grep { $_ eq $app->mode } @{$self->conf->{not_modes}||[]};
    }
    if ( $self->conf->{modes} ) {
      return unless grep { $_ eq $app->mode } @{$self->conf->{modes}||[]};
    }

    return if $c->req->is_secure;
    return $app->log->warn('SecureOnly disabled; Reverse Proxy support not enabled in Mojolicious, see http://mojolicious.org/perldoc/Mojo/Server#reverse_proxy')
      if !$c->tx->req->reverse_proxy && detect_proxy($c);

    my $url = $c->req->url->to_abs;
    $url->scheme('https');
    $url->port($self->conf->{secureport}) if $self->conf->{secureport};
    $c->app->log->debug("SecureOnly enabled; Request for insecure resource, redirecting to $url");
    $c->redirect_to($url);
  });
}

sub detect_proxy {
  my $c = shift;
  return $c->tx->req->headers->header('X-Forwarded-For') || $c->tx->req->headers->header('X-Forwarded-Proto')
}

1;

__END__