Laravel generate secure https URL from route Laravel generate secure https URL from route laravel laravel

Laravel generate secure https URL from route


UPDATE: As pointed out in the comments, a simpler way of doing this would be adding URL::forceSchema('https'); for Laravel version between 4.2-5.3 or URL::forceScheme('https'); for version 5.4+ in the boot method of your AppServiceProvider file.

Old answer:

It's actually entirely possible and there's only one line of code needed to accomplish that.

Laravel doesn't check the presence of SSL by itself, it depends on Symfony. And there goes our key to making it believe that the current request is secure.

The thing is, we have to set the HTTPS server param to true and the easiest method is to paste the following code in the boot method of your AppServiceProvider:

$this->app['request']->server->set('HTTPS', true);

In my very case, I only need to force SSL in production, the local env should still work on http. This is how I force SSL only on production:

$this->app['request']->server->set('HTTPS', $this->app->environment() != 'local');

By the way, mind those terms, you may need them in the future.


Actually turns out, that laravel doesn't care if url is secure or not, because it generates based on the current url. If you're on https page, route() will return secure url. If on http, then http:// url

The problem was, that Laravel didn't detect that https was enabled, which was due to faulty server configuration.

You can check if Laravel sees the current connection as https by calling Request::isSecure();


As I mentioned in a relevant question, I found 5 ways of how to generate secure URLs.

  1. Configure your web server to redirect all non-secure requests to https. Example of a nginx config:

    server {    listen 80 default_server;    listen [::]:80 default_server;    server_name example.com www.example.com;    return 301 https://example.com$request_uri;}
  2. Set your environment variable APP_URL using https:

    APP_URL=https://example.com
  3. Use helper secure_url() (Laravel5.6)

  4. Add following string to AppServiceProvider::boot() method (for version 5.4+):

    \Illuminate\Support\Facades\URL::forceScheme('https');
  5. Implicitly set scheme for route group (Laravel5.6):

    Route::group(['scheme' => 'https'], function () {    // Route::get(...)->name(...);});

    At the moment this way is not documented, but it works well.