[jbossseam-issues] [JBoss JIRA] Commented: (JBSEAM-741) auto-redirect to HTTPS

[Shane Bryzak (JIRA)]

    [ http://jira.jboss.com/jira/browse/JBSEAM-741?page=comments#action_12352316 ] 
            
Shane Bryzak commented on JBSEAM-741:
-------------------------------------

This kind of switching between http and https seems to have been a sore point for JSF for quite some time.  I'm not sure exactly how we'll support this, because I don't think it's a simple matter of redirecting to http/https for certain views.  Maybe doing this is part of the solution, however more research is needed to determine what else is required.  One thing I did find is a form control in the myfaces sandbox (http://myfaces.apache.org/sandbox/form.html) that allows a "scheme" to be specified, e.g. <s:form scheme="https"> - maybe we need something similar.

> auto-redirect to HTTPS
> ----------------------
>
>                 Key: JBSEAM-741
>                 URL: http://jira.jboss.com/jira/browse/JBSEAM-741
>             Project: JBoss Seam
>          Issue Type: Feature Request
>          Components: Security
>            Reporter: Gavin King
>         Assigned To: Shane Bryzak
>             Fix For: 1.1.6.GA
>
>
> We should make it easy to direct the request to https. We should also validate that requests that *should* be https actually *are* https.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira