LP#1047485 Force HTTPS for Selfcheck

We had reports of problems using selfcheck in
the field: hostname/eg/circ/selfcheck/main

It seems the problem is that if the browser uses http, it doesn't
allow the browser to stay logged in and authenticated leading to a
continuous problem using the selfcheck each time it tried to lookup
a new user's barcode, it would ask for re-authentication.

This forces HTTPS for the selfcheck alias.

Signed-off-by: Michael Peters <mrpeters@library.in.gov>

diff --git a/Open-ILS/examples/apache/eg_vhost.conf b/Open-ILS/examples/apache/eg_vhost.conf
index 81903c9..2d135a8 100644 (file)
--- a/Open-ILS/examples/apache/eg_vhost.conf
+++ b/Open-ILS/examples/apache/eg_vhost.conf
@@ -87,6 +87,12 @@ RewriteCond %{REQUEST_URI} ^/opac/(.*?)/
 RewriteRule . - [E=locale:%1]
 
 # ----------------------------------------------------------------------------------
+# Force HTTPS for /eg/circ/selfcheck
+# ----------------------------------------------------------------------------------
+RewriteCond %{HTTPS} !=on
+RewriteRule ^(/eg/circ/selfcheck) https://%{HTTP_HOST}%{REQUEST_URI} [NC,R=301,L]
+
+# ----------------------------------------------------------------------------------
 # For sanity reasons, default indexes to Off
 # ----------------------------------------------------------------------------------
 Options -Indexes