[Enforce HTTPS (Play!)]Force HTTPS decorator for Play framework #scala #play #ssl #web

EnforceHttps.scala

def forceHttps(handler: Handler, request: RequestHeader): Handler = {
    (isHTTPSRequired, isRequestSecure(request), request.method, request.uri) match {
      
      // HTTPS is supported but not required for the API
      case (_, _, _, uri) if uri.startsWith("/api") => handler
      
      // HTTPS is required here, redirect GET requests
      case (true, false, "GET", uri)                => Action(Results.Redirect(s"https://${request.domain}${request.uri}"))
      
      // HTTPS is required but we can't redirect
      case (true, false, _, _)                      => Action(Results.Forbidden("HTTPS is required"))
      
      // Ok, let's execute this handler
      case _                                        => handler
    }
  }