#113: Don't use HTTPS redirection if environment doesn't support it.

apps/CardHero.NetCoreApp.TypeScript/Startup.cs

@@ -23,6 +23,11 @@ namespace CardHero.NetCoreApp.TypeScript
 {
     public class Startup
     {
+        private static class CardHeroEnvironmentVariables
+        {
+            public const string DisableHttps = "CH_DISABLE_HTTPS";
+        }
+
         private readonly IConfiguration _configuration;
         private readonly IWebHostEnvironment _environment;
 
@@ -158,11 +163,17 @@ public void ConfigureServices(IServiceCollection services)
         // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
         public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
         {
+            app.UseForwardedHeaders();
+
             app.UseJsonException();
 
             // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
             app.UseHsts();
-            app.UseHttpsRedirection();
+
+            if (string.IsNullOrWhiteSpace(Environment.GetEnvironmentVariable(CardHeroEnvironmentVariables.DisableHttps)))
+            {
+                app.UseHttpsRedirection();
+            }
 
             app.UseResponseCompression();