如何跳过某些http请求的重定向到https？ 如何在jboss Web子系统中配置它？

Question

I have a requirement in my application where all http request are redirected to https but there is some code in my java servlet where we create http request through code and send it to jobss server where it is translating to https request. But as my servlet do not have capability to handle https response and I do not want to change the servlet code. Is there any way to configure in jboss web system to skip redirection of this http request to https request?

Answer 1

You can add security constraint like this in web.xml to disable https for few pages

<security-constraint>
  <web-resource-collection>
    <web-resource-name>pageswithouthttps</web-resource-name>
    <description>No Description</description>
    <url-pattern>/nohttps/*.jsp</url-pattern>
  </web-resource-collection>
  <user-data-constraint>
    <description>No Description</description>
    <transport-guarantee>NONE</transport-guarantee>
  </user-data-constraint>
</security-constraint>

<security-constraint>
  <web-resource-collection>
    <web-resource-name>httpspages</web-resource-name>
    <description>No Description</description>
    <url-pattern>*.jsp</url-pattern>
  </web-resource-collection>
  <user-data-constraint>
    <description>No Description</description>
    <transport-guarantee>CONFIDENTIAL</transport-guarantee>
  </user-data-constraint>
</security-constraint>