sslmiddleware.py

from django.conf import settings
from django.http import HttpResponseRedirect, get_host
import re
import logging
log = logging.getLogger('genel')

SSL = 'SSL'
SSL_URLS = (
 r'/../login/',
 r'/../login_or_register/',
 r'/../register/',
 r'/../secure_booking/',
 r'/../cc_success/',
 r'/../cc_fail/',
 r'/../contact_us/',
 r'/../paypal_\w*?/',
 r'/facebook/connect/',
)
class SSLRedirect:
    urls = tuple([re.compile(url) for url in SSL_URLS])

    def process_request(self, request):
        secure = False
        for url in self.urls:
            if url.match(request.path):
                secure = True
                break
        if not secure == self._is_secure(request):
            return self._redirect(request, secure)

    def _is_secure(self, request):
#	log.info('issecure :%s middle url :%s' % (request.is_secure(), request.build_absolute_uri()))
        if request.is_secure():
            return True

        #Handle the Webfaction case until this gets resolved in the request.is_secure()
        if 'HTTP_X_FORWARDED_SSL' in request.META:
            return request.META['HTTP_X_FORWARDED_SSL'] == 'on'

        return False

    def _redirect(self, request, secure):
        protocol = secure and "https" or "http"
        host = get_host(request)
#        if secure:
#            host = getattr(settings, 'SSL_HOST', get_host(request))
#        else:
#            host = getattr(settings, 'HTTP_HOST', get_host(request))
        newurl = "%s://%s%s" % (protocol,host,request.get_full_path())
        if settings.DEBUG and request.method == 'POST':
            raise RuntimeError, \
        """Django can't perform a SSL redirect while maintaining POST data.
           Please structure your views so that redirects only occur during GETs."""

        return HttpResponseRedirect(newurl)