Download the PHP package middlewares/https without Composer
On this page you can find all versions of the php package middlewares/https. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download middlewares/https
More information about middlewares/https
Files in middlewares/https
Package https
Short Description Middleware to redirect to https and adds the Strict-Transport-Security header
License MIT
Homepage https://github.com/middlewares/https
Informations about the package https
middlewares/https
Middleware to redirect to https
if the request is http
and add the Strict Transport Security header to protect against protocol downgrade attacks and cookie hijacking.
Requirements
- PHP >= 7.2
- A PSR-7 http library
- A PSR-15 middleware dispatcher
Installation
This package is installable and autoloadable via Composer as middlewares/https.
Example
Usage
This middleware accept a Psr\Http\Message\ResponseFactoryInterface
as a constructor argument, to create the redirect responses. If it's not defined, Middleware\Utils\Factory will be used to detect it automatically.
maxAge
This option allow to define the value of max-age
directive for the Strict-Transport-Security
header. By default is 31536000
(1 year).
includeSubdomains
By default, the includeSubDomains
directive is not included in the Strict-Transport-Security
header. Use this function to change this behavior.
preload
By default, the preload
directive is not included in the Strict-Transport-Security
header. Use this function to change this behavior.
checkHttpsForward
Enabling this option ignore requests containing the header X-Forwarded-Proto: https
or X-Forwarded-Port: 443
. This is specially useful if the site is behind a https load balancer.
redirect
This option returns a redirection response from http
to https
. It's enabled by default.
Please see CONTRIBUTING for contributing details.
The MIT License (MIT). Please see LICENSE for more information.
All versions of https with dependencies
middlewares/utils Version ^3.0 || ^4.0
psr/http-server-middleware Version ^1.0