Re: Accessing a page over HTTPS results in infinite 302 redirects

--000000000000d06977058b441f79
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi,

I'd suggest to check value of `Request#isSecure()`, it looks like it's
false.

It can happen if your WebSphere is behind a proxy/load balancer which
terminates SSL,
in this case you may need to configure WebSphere to acknowledge the
x-forwarded-proto HTTP header.

On Fri, Jun 14, 2019 at 9:17 AM Kim Syv=C3=A4luoma <[email protected]> wrot=
e:

> We have a Tapestry application which we need to use over HTTPS only. We
> are using Weblogic only.
>
> We have these set in the AppModule of the Tapestry application:
>
> public static void contributeApplicationDefaults(
>          final MappedConfiguration<String, String> configuration) {
>      configuration.add("tapestry.supported-locales", "en");
>      configuration.add("tapestry.start-page-name", "start");
>      configuration.add(SymbolConstants.HOSTPORT_SECURE, "443");
>      configuration.add(SymbolConstants.SECURE_ENABLED, "true");
> }
>
> public static void contributeMetaDataLocator(final
> MappedConfiguration<String, String> configuration) {
>      configuration.add(MetaDataConstants.SECURE_PAGE, "true");
> }
>
> In the Start page we have a redirect like this:
>
> final Object onActivate() {
>      if (!this.sessionHandler.isLoggedIn()) {
>          return this.loginPage;
>      }
>      return this.mainFrameSet;
> }
>
> We we try to access our app by HTTPS at root or directly at the start
> page, loginPage or mainFrameSet page we get infinite redirect loop (302)
> to the same page we are accessing.
>
> If we set the MetaDataConstants.SECURE_PAGE to false we can access our
> app over HTTPS but all page requests/links within the app is then done
> over HTTP and that does not work.
> We need to have all functionality within the app to work over, and using
> only, HTTPS.
>
> What have we missed?
>
> Br,
> Kim
>
> --
> =C2=A4=C2=BA=C2=B0`=C2=B0=C2=BA=C2=A4=C3=B8,=C2=B8=C2=B8,=C3=B8=C2=A4=C2=
=BA=C2=B0`=C2=B0=C2=BA=C2=A4=C3=B8=C2=A4=C2=BA=C2=B0`=C2=B0=C2=BA=C2=A4=C3=
=B8,=C2=B8=C2=B8,=C3=B8=C2=A4=C2=BA=C2=B0`=C2=B0=C2=BA=C2=A4=C3=B8=C3=B8=C2=
=A4=C2=BA=C2=B0`=C2=B0=C2=BA=C2=A4=C3=B8,=C2=B8=C2=B8,=C3=B8=C2=A4
> Name:           |       Kim Syv=C3=A4luoma                    |
> Email:          |       [email protected]                |
> Tel (GSM):      |       +358 (0)40 592 5267              |
> Tel Work:       |       +358 (0)20 7910 666              |
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
>

--=20
Dmitry Gusev

AnjLab Team
http://anjlab.com

--000000000000d06977058b441f79--