Page 1 of 1

Admin on https ? Assets bug ? Or mistake ?

Posted: Mon Apr 28, 2014 4:20 pm
by newone123.1991
Hi I just turned on SSL on my apache server (apache is in front of jboss - ajp connection). Everything works great untill i try to use some functions connected with jquery post / get

In Firebug I see:

Code: Select all

GET http://secret.domian.com/admin/product/null/chooseAsset?startIndex=50&maxIndex=99 - ERROR


Why it is http ? not https ?

Re: Admin on https ? Assets bug ? Or mistake ?

Posted: Tue Apr 29, 2014 5:10 pm
by phillipuniverse
You can update applicationContext-admin-security.xml to force https. This is what is in there out of the box:

Code: Select all

<sec:intercept-url pattern="/**" requires-channel="any" />
<sec:intercept-url pattern="/" requires-channel="any" />


You can change this to require https:

Code: Select all

<sec:intercept-url pattern="/**" requires-channel="https" />
<sec:intercept-url pattern="/" requires-channel="https" />