2 Replies Latest reply: Apr 26, 2014 9:28 AM by Şerban RSS

    force HTTPS only on login page for REST Data Services (former APEX Listener)

    Şerban

      Hi,

      I am trying to use HTTPS for the login pages and then switch back to HTTP.

      I have deployed ORDS (former APEX Listener) in a Tomcat. For now I am able to make the first switch (that is to use HTTPS) by adding the following into web.xml:

      <security-constraint>

                      <web-resource-collection>

                              <web-resource-name>Automatic SLL Forwarding</web-resource-name>

                              <url-pattern>/apex/f?p=110:LOGIN*</url-pattern>

                              <user-data-constraint>

                                 <transport-guarantee>CONFIDENTIAL</transport-guarantee>

                              </user-data-constraint>

                      </web-resource-collection>

      </security-constraint>

       

      but then it stays on HTTPS for the whole application and I need it to go back to HTTP.

       

      Is there a way to make this "switch back" possible?

      Thank you!