talis/simplesamlphp — pull request #1 by rgubby (2014-07-11 08:24:18+00:00)
Title: Added check for AWS load balanced SSL header

When load balancing through AWS, the traffic gets passed to the web servers as http, so without an extra header from the LB so say that it's SSL traffic, you'd never know.

The good news is that AWS load balancers pass through a header variable of X-Forwarded-Proto when it's originating from SSL.