You should always force your application to use HTTPS in production. Here's how you can do it with Laravel:
1️⃣ Ensure all generated links use https (configurable with the URL facade)
2️⃣ Redirect users from http to https (with a middleware)
-----
Learn tip-by-tip in this series how to make Laravel an even better development experience!
You can find the repository with the code from this video here: https://github.com/imliam/smarter-kit