src/EventSubscriber/ForceHttpsFromProxySubscriber.php line 18

Open in your IDE?
  1. <?php
  3. namespace App\EventSubscriber;
  5. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  6. use Symfony\Component\HttpKernel\Event\RequestEvent;
  7. use Symfony\Component\HttpKernel\KernelEvents;
  9. class ForceHttpsFromProxySubscriber implements EventSubscriberInterface
  10. {
  11.     public static function getSubscribedEvents(): array
  12.     {
  13.         return [
  14.             KernelEvents::REQUEST => ['onKernelRequest', 2048],
  15.         ];
  16.     }
  18.     public function onKernelRequest(RequestEvent $event): void
  19.     {
  20.         $request = $event->getRequest();
  22.         if ($request->isSecure()) {
  23.             return;
  24.         }
  26.         $forwarded = strtolower((string) $request->headers->get('forwarded', ''));
  27.         $xForwardedProto = strtolower((string) $request->headers->get('x-forwarded-proto', ''));
  28.         $xForwardedSsl = strtolower((string) $request->headers->get('x-forwarded-ssl', ''));
  29.         $xUrlScheme = strtolower((string) $request->headers->get('x-url-scheme', ''));
  30.         $frontEndHttps = strtolower((string) $request->headers->get('front-end-https', ''));
  32.         $isHttpsFromProxy =
  33.             str_contains($forwarded, 'proto=https')
  34.             || str_contains($xForwardedProto, 'https')
  35.             || 'on' === $xForwardedSsl
  36.             || 'https' === $xUrlScheme
  37.             || 'on' === $frontEndHttps;
  39.         if (!$isHttpsFromProxy) {
  40.             return;
  41.         }
  43.         $request->server->set('HTTPS', 'on');
  44.         $request->server->set('SERVER_PORT', 443);
  45.     }
  46. }