Spring Security: Forcing URLs to use HTTPS | My Shitty Code

Spring Security: Forcing URLs to use HTTPS | My Shitty Code

Your web application supports both HTTP and HTTPS. You want to force all URLs to use HTTPS.

SOLUTION

Spring Security has a simple configuration that allows us to redirect all HTTP-based URLs to HTTPS. All we have to do is to set requires-channel="https" on <security:intercept-url/> tag.

Read full article from Spring Security: Forcing URLs to use HTTPS | My Shitty Code