{"action":"opened","issue":{"url":"https://api.github.com/repos/aspnetboilerplate/aspnetboilerplate/issues/368","labels_url":"https://api.github.com/repos/aspnetboilerplate/aspnetboilerplate/issues/368/labels{/name}","comments_url":"https://api.github.com/repos/aspnetboilerplate/aspnetboilerplate/issues/368/comments","events_url":"https://api.github.com/repos/aspnetboilerplate/aspnetboilerplate/issues/368/events","html_url":"https://github.com/aspnetboilerplate/aspnetboilerplate/issues/368","id":59643212,"number":368,"title":"How to force HTTPS for sensitive API calls?","user":{"login":"jefftindall","id":10339968,"avatar_url":"https://avatars.githubusercontent.com/u/10339968?v=3","gravatar_id":"","url":"https://api.github.com/users/jefftindall","html_url":"https://github.com/jefftindall","followers_url":"https://api.github.com/users/jefftindall/followers","following_url":"https://api.github.com/users/jefftindall/following{/other_user}","gists_url":"https://api.github.com/users/jefftindall/gists{/gist_id}","starred_url":"https://api.github.com/users/jefftindall/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jefftindall/subscriptions","organizations_url":"https://api.github.com/users/jefftindall/orgs","repos_url":"https://api.github.com/users/jefftindall/repos","events_url":"https://api.github.com/users/jefftindall/events{/privacy}","received_events_url":"https://api.github.com/users/jefftindall/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-03-03T13:46:23Z","updated_at":"2015-03-03T13:46:23Z","closed_at":null,"body":"Has anyone tried to force some or all calls to be made using HTTPS?  I have some calls that I would like to ensure are encrypted to protect the data transmission.  We are already using authorization and I have RequireHttps on my HomeController to redirect users to an HTTPS connection.\r\n\r\nMy current thought was to check for HttpContext.IsSecureConnection during my Authorization check in my Interceptor and throw an exception if the call is not secure.  While this works, I was wondering if anyone has come up with a more elegant solution?\r\n\r\nThanks,\r\nJeff"}}