在CakePHP Auth中-有一种方法可以在所有需要身份验证的操作上强制使用https（但不能进行其他操作）

Question

Using CakePHP Auth, I want to have all actions that require being logged in to also be forced to use https.

Is this possible via a callback somehow?

Further info: I have admin routing in use as well as certain "member-only" actions. Using CakePHP 1.2 also.

Many thanks for any pointers on this.

Answer 1

版本2.x的新功能：SecurityComponent :: requireSecure（）参见http://book.cakephp.org/2.0/en/core-libraries/components/security-component.html

Answer 2

登录页面也必须通过HTTPS提供服务，并且您可能希望为登录用户提供secure会话cookie，因此在通过HTTP访问网站时不会传输该登录cookie（这意味着用户在浏览时不会显示为登录状态）通过HTTP）。