You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@shiro.apache.org by "lprimak (via GitHub)" <gi...@apache.org> on 2024/09/20 16:48:18 UTC
[I] [Enhancement, Jakarta EE] Login flow redirects go to http instead of https, leading to multiple redirects [shiro]
lprimak opened a new issue, #1762:
URL: https://github.com/apache/shiro/issues/1762
### Search before asking
- [X] I had searched in the [issues](https://github.com/apache/shiro/issues?q=is%3Aissue) and found no similar issues.
### Enhancement Request
When the app is behind a SSL-terminating proxy, Shiro will redirect to the default screen, or login screen, via non-SSL URL. This is because servlet "thinks" that the connection is non-SSL.
However, since `X-Forwarding-Proto` is present, it should redirect to SSL.
This is not a huge deal since the proxy will redirect back to SSL, however, it leads to 2+ additional redirect per login request, which should be avoided as optimization.
### Describe the solution you'd like
Override `sendRedirect()` and append `https://` prefix if it's detected that https protocol is used by the proxy
### Are you willing to submit PR?
- [X] Yes I am willing to submit a PR!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@shiro.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@shiro.apache.org
For additional commands, e-mail: issues-help@shiro.apache.org
Re: [I] [Enhancement, Jakarta EE] Login flow redirects go to http instead of https, leading to multiple redirects [shiro]
Posted by "lprimak (via GitHub)" <gi...@apache.org>.
lprimak closed issue #1762: [Enhancement, Jakarta EE] Login flow redirects go to http instead of https, leading to multiple redirects
URL: https://github.com/apache/shiro/issues/1762
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@shiro.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@shiro.apache.org
For additional commands, e-mail: issues-help@shiro.apache.org