Spring Security: requires-channel=“https” behind SSL accelerator
We're using an F5 BIG-IP device to terminate SSL connections and connecting by plain HTTP to the application server with an spring enabled application. Also we configured F5 to send an X-Forwarded-Proto header with http or https as value. Now we'd like to enforce HTTPS by configuring an intercept url: <security:intercept-url pattern="/login.action" requires-channel="https" /> But this only works if the protocol scheme in the servlet containter is HTTPS, so we need to interpret the HTTP header. Any idea how to do this? Thanks Simon Subclass SecureChannelProcessor and InsecureChannelProcessor