Force SSL-Always for NancyFx requests

Force SSL-Always for NancyFx requests

public class AlwaysUseHttps : IApplicationStartup
{
	private readonly IConfigurationService _config;

	public AlwaysUseHttps(IConfigurationService config)
	{
		_config = config;
	}

	public void Initialize(IPipelines pipelines)
	{
		pipelines.BeforeRequest.AddItemToStartOfPipeline(RedirectIfNotHttps);
	}

	private Response RedirectIfNotHttps(NancyContext context)
	{
		var requestUrl = context.Request.Url.Scheme;
		if ("https".Equals(requestUrl, StringComparison.OrdinalIgnoreCase))
		{
			// We are ssl continue pipeline 
			return null;
		}

		return RequiresHttps(context);
	}

	private Response RequiresHttps(NancyContext context)
	{
		var request = context.Request;

		if (request.Method.Equals("GET", StringComparison.OrdinalIgnoreCase) == false)
		{
			return new Response { StatusCode = HttpStatusCode.Forbidden };
		}

		var redirectUrl = request.Url.Clone();
		redirectUrl.Port = _config.HttpsPort;
		redirectUrl.Scheme = "https";

		return new RedirectResponse(redirectUrl.ToString());
	}
}