1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
//! HTTP-to-HTTPS redirect middleware for Axum and Tower.
//!
//! A [`tower::Layer`] that detects incoming HTTP requests and issues a
//! permanent redirect to the HTTPS equivalent. HTTPS requests are forwarded
//! to the inner service unchanged.
//!
//! Detection follows this priority order:
//!
//! 1. `X-Forwarded-Proto: http` — set by most reverse proxies when the
//! upstream connection is plain HTTP.
//! 2. URI scheme of `http` — present when the request line carries an
//! absolute URI. Plain HTTP/1.1 requests served by `axum::serve` use the
//! origin form (`GET /path`) and have no scheme, so without a proxy that
//! sets `X-Forwarded-Proto` most requests are not detected.
//!
//! If neither indicator is present the request passes through unchanged,
//! which is the safe default when the protocol cannot be determined.
//!
//! # Features
//!
//! - Configurable redirect status: `308 Permanent Redirect` (default,
//! method-preserving) or `301 Moved Permanently` (legacy compatibility).
//! - Optional HTTPS port override for non-standard port setups.
//! - Graceful fallback: if no `Host` header is present the request is
//! forwarded rather than returning a malformed redirect without `Location`.
//! - A `Host` header that is not a plain host name or IP literal with an
//! optional port gets `400 Bad Request`, so a forged host never turns into
//! an open redirect.
//!
//! # Quick Start
//!
//! ```rust
//! use axum::{routing::get, Router};
//! use rune_axum_redirect_https::RedirectHttpsLayer;
//!
//! let app: Router = Router::new()
//! .route("/", get(|| async { "hello" }))
//! .layer(RedirectHttpsLayer::default());
//! ```
//!
//! # Custom Configuration
//!
//! ```rust
//! use axum::{routing::get, Router};
//! use http::StatusCode;
//! use rune_axum_redirect_https::{RedirectHttps, RedirectHttpsLayer};
//!
//! // HTTP on :8080 → HTTPS on :8443, using 301 for legacy clients
//! let layer = RedirectHttpsLayer::new(
//! RedirectHttps::new()
//! .status(StatusCode::MOVED_PERMANENTLY)
//! .https_port(8443),
//! );
//!
//! let app: Router = Router::new()
//! .route("/", get(|| async { "hello" }))
//! .layer(layer);
//! ```
pub use ;