[midPoint] Redirect from https to http if user is not logged in

Attila Szlovak attila.szlovak at motivum.sk
Tue Nov 21 16:37:27 CET 2017


Hello,

I found an interesting redirect path in midPoint (on Apache Tomcat) if
the user is not logged in: the https URL is redirected to http and back
to https (if http connection is not allowed on firewall then the http
url is not accessible and the user is unable to login).

The very same redirecting works also on demo site (with command curl -v
<url>):

curl -v https://demo.evolveum.com/midpoint/   

curl -v https://demo.evolveum.com/midpoint/self/dashboard

curl -v http://demo.evolveum.com/midpoint/login

curl -v https://demo.evolveum.com/midpoint/login


Is there a known solution how to change the configuration to redirect
only to https URL if the first URL is https?


Regards,

Attila





More information about the midPoint mailing list