INNER CODE UNIT · JavaScript

issecure

expressjs/session · index.js:678

function issecure(req, trustProxy) {
  // socket is https server
  var socket = req.socket || req.connection;
  if (socket && socket.encrypted) {
    return true;
  }

  // do not trust proxy
  if (trustProxy === false) {
    return false;
  }

  // no explicit trust; try req.secure from express
  if (trustProxy !== true) {
    return req.secure === true
  }

  // read the proto from x-forwarded-proto header

View source record →