How to Redirect HTTP to HTTPS in .Net MVC Application

In today's online world, keeping your web app safe is super important. One big part of staying secure is using HTTPS (a safer way to connect) instead of the old HTTP. HTTPS makes sure the info going between your app and users is secret, plus it shows a lock in the browser's address bar, which people trust. This guide will show you how to switch from HTTP to HTTPS in an .Net MVC application.

Why Redirect HTTP to HTTPS?

HTTPS provides encryption and data integrity, which means that sensitive information remains confidential and tamper-proof during transit. Search engines also favor secure websites, potentially boosting your SEO rankings. By redirecting HTTP traffic to HTTPS, you enhance the security and credibility of your MVC application.

Step-by-Step Guide

1. Update MVC Application Settings

Open your MVC application's configuration files and make the following changes:

1. In the Web.config file, add or modify the following lines to ensure that your application always uses HTTPS:

<system.webServer>
  <rewrite>
    <rules>
      <rule name="HTTP to HTTPS" stopProcessing="true">
        <match url="(.*)" />
        <conditions>
          <add input="{HTTPS}" pattern="off" />
        </conditions>
        <action type="Redirect" url="https://{HTTP_HOST}/{R:1}" redirectType="Permanent" />
      </rule>
    </rules>
  </rewrite>
</system.webServer>

2. Implement Code-Level Redirection

In your MVC application code, you can also enforce HTTPS by adding a filter to the Global.asax.cs file:

using System.Web.Mvc;

namespace YourMVCApp
{
    public class MvcApplication : System.Web.HttpApplication
    {
        protected void Application_BeginRequest()
        {
            if (!Context.Request.IsSecureConnection)
                Response.Redirect(Context.Request.Url.ToString().Replace("http:", "https:"), true);
        }
        
        // Other application lifecycle methods...
    }
}

3. Test the Redirection

After implementing the above changes, it's crucial to test the redirection to ensure it's working as expected. Follow these steps:

1. Launch your MVC application locally.
2. Enter an HTTP URL (e.g., http://localhost:12345) in your browser's address bar.
3. The application should automatically redirect you to the corresponding HTTPS URL (e.g., https://localhost:12345).