Add new settings ForceUseHTTPS

src/Core/Grand.Infrastructure/Configuration/SecurityConfig.cs

@@ -7,6 +7,11 @@ public class SecurityConfig
         /// </summary>
         public bool UseForwardedHeaders { get; set; }
 
+        /// <summary>
+        /// Gets or sets a value indicating whether to force use https
+        /// </summary>
+        public bool ForceUseHTTPS { get; set; }
+
         /// <summary>
         /// Gets or sets a value for allowedHosts, is used for host filtering to bind your app to specific hostnames
         /// </summary>

src/Web/Grand.Web.Common/Startup/ForwardedHeadersStartup.cs

@@ -34,7 +34,14 @@ public void Configure(IApplicationBuilder application, IWebHostEnvironment webHo
 
             var serviceProvider = application.ApplicationServices;
             var securityConfig = serviceProvider.GetRequiredService<SecurityConfig>();
-
+            if (securityConfig.ForceUseHTTPS)
+            {
+                application.Use((context, next) =>
+                {
+                    context.Request.Scheme = "https";
+                    return next(context);
+                });
+            }
             if (securityConfig.UseForwardedHeaders)
                 application.UseGrandForwardedHeaders();
 

src/Web/Grand.Web/App_Data/appsettings.json

@@ -50,6 +50,9 @@
     //Use a reverse proxy server - more information you can find at: https://docs.microsoft.com/en-US/aspnet/core/host-and-deploy/linux-nginx
     "UseForwardedHeaders": false,
 
+    //In some cases, it might not be possible to add forwarded headers to the requests proxied to the app. 
+    "ForceUseHTTPS": false,
+
     //AllowedHosts, is used for host filtering to bind your app to specific hostnames
     "AllowedHosts": "*",