Disable TLS when http-only=true

tsuru · Oct 31, 2024 · 696dfd8 · 696dfd8
1 parent 94e9cc9
commit 696dfd8
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/api/api.go b/api/api.go
@@ -329,6 +329,16 @@ func (a *RouterAPI) supportTLS(w http.ResponseWriter, r *http.Request) error {
 	if err != nil {
 		return err
 	}
+
+	headerOpts := r.Header.Values("X-Router-Opt")
+	for _, opt := range headerOpts {
+		if opt == "http-only=true" {
+			w.WriteHeader(http.StatusNotFound)
+			fmt.Fprintf(w, "No TLS Capabilities, disabled via header")
+			return nil
+		}
+	}
+
 	_, ok := svc.(router.RouterTLS)
 	if !ok {
 		w.WriteHeader(http.StatusNotFound)