在Google Cloud Endpoints + App Engine上强制HTTPS

Question

I have a web service running on Google App Engine with Cloud Endpoints for security. My web service is running on node.js with express. I have:

schemes:
- "https"

in my openAPI swagger file but the paths still works with HTTP. I want to make the web service SSL only. How can I block all HTTP requests?

Modifying the app.yaml doesn't work for me because node.js environment doesn't support handlers. I tried using the express-sslify module but it did not work as well.

Answer 1

Endpoints does not have the ability to block requests according to the scheme. Therefore, you cannot use Endpoints to perform blocking only HTTP requests.