将webapp2中的某些域的http重定向到https

Question

We use Google appengine namespaces for a mutli-tenant application. Each tenant has a different domain. Some of the domains need to have ssl enabled but some do not require ssl. For the domains that do require ssl, I'd like all old http links to redirect to their https equivalent.

If we set secure: always in app.yaml, then the domains that do not require ssl (domains that don't have certificates) won't work as all requests are redirect to https.

I assume I need to handle the redirect to https in webapp routing, depending on the domain requested. I've tried the "app_scheme" approach outlined here How to use WSGI to reroute a user from http to https but that doesn't handle redirects to https if accessing via http.

Is there a way to handle redirect without re-writing all the DomainRoutes?

Answer 1

Alternate approach: you could have 2 apps, one for the http domains and one for the https domains, sharing the same app code except for the secure: always settings in the .yaml config files (achievable with a simple VCS repo branching strategy). No rule re-writing required.

The 1st app is your current app unchanged, serving all http-only domains.

The 2nd app is a clone of your existing app, with secure: always added in app.yaml . It will serve all https domains.

You'd need to remove the https domains from the domain mappings of your 1st app and place them in the domain mapping of your 2nd app.

You may also need to copy/move any datastore data pertinent to the https-only domains to the 2nd app since AFAIK the apps can't share the same datastore (it might be possible to share cloud storage between the 2 apps). Not 100% sure, I didn't yet attempt to share data between different apps.