`http` protocol used at some point during human-readable slug redirects in lower environments

[jimchamp]

At some point during the URL rewriting process for works, redirects use http instead of https in both testing and staging environments.

Evidence / Screenshot (if possible)

Note the "Location" in the response headers.

Relevant url?

Compare the redirects for the following URLs:

https://testing.openlibrary.org/authors/OL5017833A/foo
https://openlibrary.org/authors/OL5017833A/foo

Steps to Reproduce

1. With the dev tools network tab open, go to https://testing.openlibrary.org/authors/OL5017833A/foo
2. Note that this redirects to an http:// URL

• Actual: HTTP is used during redirects
• Expected: HTTPS is used during redirects

Details

• Logged in (Y/N)? N/A
• Browser type/version? Firefox 92.0
• Operating system? N/A
• Environment (prod/dev/local)? testing and staging

Proposal & Constraints

Related files

Stakeholders

@RayBB
@cdrini

[RayBB]

This is a problem for me in #5741 because having an http redirect in an iframe causes a failure.

[cdrini]

Marking as low priority ; don't consider this a blocker for #5741 , we can test locally to a sufficient degree of confidence.