Django Middleware to have `request.is_secure()` always return `True`. Maybe preferred to a WSGI middleware. Refs: https://noumenal.es/notes/til/django/csrf-trusted-origins/

middleware.py

class HTTPSOnlyMiddleware:
    """
    Override request.is_secure() to always return True.
    
    Only use if you're **always** serving with HTTPS
    **and** SECURE_PROXY_SSL_HEADER is not suitable for your setup. 
    """

    def __init__(self, get_response):
        self.get_response = get_response

    def __call__(self, request):

        # Option 1: Main API — is_secure():
        def is_secure():
            return True

        request.is_secure = is_secure

        # Option 2: Lower level — _get_scheme():
        # ???: What **else** uses the `request.scheme` property? 🤔
        # def _get_scheme():
        #     return 'https'
        #
        # request._get_scheme = _get_scheme

        # Either way...
        assert request.is_secure()

        response = self.get_response(request)
        return response