From: Michael Peters Date: Tue, 18 Dec 2012 16:05:12 +0000 (-0500) Subject: LP#1047485 Force HTTPS for Selfcheck X-Git-Url: https://old-git.evergreen-ils.org/?a=commitdiff_plain;h=refs%2Fheads%2Fuser%2Fmrpeters-isl%2Flp1047485_selfcheck_https;p=working%2FEvergreen.git LP#1047485 Force HTTPS for Selfcheck We had reports of problems using selfcheck in the field: hostname/eg/circ/selfcheck/main It seems the problem is that if the browser uses http, it doesn't allow the browser to stay logged in and authenticated leading to a continuous problem using the selfcheck each time it tried to lookup a new user's barcode, it would ask for re-authentication. This forces HTTPS for the selfcheck alias. Signed-off-by: Michael Peters --- diff --git a/Open-ILS/examples/apache/eg_vhost.conf b/Open-ILS/examples/apache/eg_vhost.conf index 81903c93c1..2d135a857e 100644 --- a/Open-ILS/examples/apache/eg_vhost.conf +++ b/Open-ILS/examples/apache/eg_vhost.conf @@ -87,6 +87,12 @@ RewriteCond %{REQUEST_URI} ^/opac/(.*?)/ RewriteRule . - [E=locale:%1] # ---------------------------------------------------------------------------------- +# Force HTTPS for /eg/circ/selfcheck +# ---------------------------------------------------------------------------------- +RewriteCond %{HTTPS} !=on +RewriteRule ^(/eg/circ/selfcheck) https://%{HTTP_HOST}%{REQUEST_URI} [NC,R=301,L] + +# ---------------------------------------------------------------------------------- # For sanity reasons, default indexes to Off # ---------------------------------------------------------------------------------- Options -Indexes