SSLOnlyMiddleware

setup.py

setup(
    entry_points={
        'paste.filter_app_factory': [
            'ssl_only = myapp.middlewares.ssl_only:make_filter',
        ],
    }
)

site.ini

[app:main]
use = egg:myapp

filter-with = egg:myapp#ssl_only

ssl_only.py

from webob.exc import HTTPMovedPermanently
from webob.dec import wsgify

@wsgify.middleware
def SSLOnlyMiddleware(request, app):
    # check that the incoming request was using https
    if request.headers['X-Forwarded-Proto'] != 'https':
        # redirect the user back using https
        https_url = request.url.replace('http://', 'https://')
        return HTTPMovedPermanently(location=https_url)
    
    # override the request scheme to tell the app that we are using https
    request.scheme = 'https'
    return app
    
def make_filter(app, global_conf, **filter_settings):
    return SSLOnlyMiddleware(app)