Note that there are some explanatory texts on larger screens.

plurals
  1. POtomcat webapp How to switch to https and back to http without spring security
    primarykey
    data
    text
    <p>Using Tomcat 7.0.32, we have a login page, that by default, the user comes to through http. we immediately redirect the user to use https.<br> Goal : After user enters the credentials, we want to redirect the user to the Home page using http.</p> <p>I understand the security risks -- man in the middle, session hijacking, etc.</p> <p>I can't use spring security -- it's too late in the game -- release is coming shortly and https performance sucks.</p> <p>Also, our app has a "change password" usecase -- the user accesses "changepassword.jsp" from a menu in the home page, I guess I should redirect the user to "changepassword.jsp" using https. After password change is confirmed, then redirect user back again to homepage using http. Thoughts ?</p> <p>How to go about doing it -- is there any sample code available ?</p> <p><strong>UPDATE 1</strong> : I've read about the issue from <br> 1) <a href="http://tomcat.10.n6.nabble.com/Session-lost-when-switching-from-https-to-http-after-upgrade-to-Tomcat-6-td2105781.html" rel="nofollow">http://tomcat.10.n6.nabble.com/Session-lost-when-switching-from-https-to-http-after-upgrade-to-Tomcat-6-td2105781.html</a> <br> 2) <a href="http://tomcat.10.n6.nabble.com/how-to-auto-redirect-to-https-from-http-td2087325.html" rel="nofollow">http://tomcat.10.n6.nabble.com/how-to-auto-redirect-to-https-from-http-td2087325.html</a><br></p> <p>Code from <a href="https://forums.oracle.com/forums/thread.jspa?threadID=1394970" rel="nofollow">https://forums.oracle.com/forums/thread.jspa?threadID=1394970</a> (Cabir)<br></p> <p>What gotchas should I expect ?</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload