Search code examples
grailsspring-securitygrails-controller

how to force https

I have a grails project. Right now, the user can access it either with HTTP or HTTPS. I would like to require that they can only access it through HTTPS. any ideas? I do have spring security core installed, if that can be of help

thanks jason

Solution

  • Spring's core supports that:

    grails.plugins.springsecurity.secureChannel.definition = [
  '/path/**':         'REQUIRES_SECURE_CHANNEL'
]