ASP.NET Core middleware that forbids HTTP requests

Startup.cs

app.Use(async (context, next) =>
{
    if (!context.Request.Scheme.IsHttps) {
        context.Response.StatusCode = StatusCodes.Status403Forbidden;
        await context.Response.WriteAsync("HTTPS is required.");
        return;
    }
    await next.Invoke();
});