Spring Security: requires-channel=“https” behind SSL accelerator

前端 未结 3 853
礼貌的吻别
礼貌的吻别 2020-12-15 11:54

We\'re using an F5 BIG-IP device to terminate SSL connections and connecting by plain HTTP to the application server with an spring enabled application. Also we configured F

3条回答
  •  暖寄归人
    2020-12-15 12:29

    I know this question/answer is 4 years old, but it help me to find the solution to my problem. But in modern Spring Boot applications, the fix is easier. Just add the following entry in your application.yaml:

    server.tomcat.protocol_header: x-forwarded-proto

    Mor information here: http://docs.spring.io/spring-boot/docs/current/reference/html/howto-security.html#howto-enable-https

提交回复
热议问题