v0.29.0

src/proxy/upstream_helpers.rs

@@ -420,40 +420,6 @@ async fn observe(State(state): State<Arc<App>>, mut request: Request, next: Next
         ))
     })
 }
-/// Build a same-host HTTPS redirect while preserving the request path and query.
-fn force_ssl_location(host: &str, uri: &Uri, port: u16) -> Option<HeaderValue> {
-    let path = uri
-        .path_and_query()
-        .map(|value| value.as_str())
-        .unwrap_or("/");
-    let location = if port == 443 {
-        format!("https://{host}{path}")
-    } else {
-        format!("https://{host}:{port}{path}")
-    };
-    HeaderValue::from_str(&location).ok()
-}
-
-fn force_ssl_redirect(
-    frontend: &crate::config::CompiledFrontend,
-    host: &str,
-    uri: &Uri,
-) -> Option<Response> {
-    if !frontend.force_ssl {
-        return None;
-    }
-    let location = force_ssl_location(host, uri, frontend.https_redirect_port?)?;
-    let mut response = StatusCode::PERMANENT_REDIRECT.into_response();
-    response
-        .headers_mut()
-        .insert(http::header::LOCATION, location);
-    // Do not pin a redirect in a browser after an operator later disables Force SSL.
-    response
-        .headers_mut()
-        .insert("cache-control", HeaderValue::from_static("no-store"));
-    Some(response)
-}
-
 /// HTTP/2 and HTTP/3 authority is a pseudo-header, not necessarily a Host field.
 /// HTTP/1 absolute-form remains forbidden: this is not a forward proxy.
 fn effective_host(request: &Request, tls: bool) -> Result<HeaderValue, ()> {