0 Replies Latest reply on Apr 26, 2014 2:32 PM by Şerban

    force HTTPS only on login page of APEX apps

    Şerban

      Hi,

      I am trying to use HTTPS for the login pages and then switch back to HTTP.

      I have deployed ORDS (former APEX Listener) in a Tomcat. For now I am able to make the first switch (that is to use HTTPS) by adding the following into web.xml:

      <security-constraint>

                      <web-resource-collection>

                              <web-resource-name>Automatic SLL Forwarding</web-resource-name>

                                 <url-pattern>/apex/f?p=110:LOGIN*</url-pattern>

                                 <user-data-constraint>

                                     <transport-guarantee>CONFIDENTIAL</transport-guarantee>

                               </user-data-constraint>

                      </web-resource-collection>

      </security-constraint>

       

      but then it stays on HTTPS for the whole application and I need it to go back to HTTP.

       

      Is there a way to make this "switch back" possible?

       

      Thank you!