We're using an F5 BIG-IP device to terminate SSL connections and connecting by plain HTTP to the application server with an spring enabled application. Also we configured F5 to send an X-Forwarded-Proto header with http or https as value.
Now we'd like to enforce HTTPS by configuring an intercept url:
<security:intercept-url pattern="/login.action" requires-channel="https" />
But this only works if the protocol scheme in the servlet containter is HTTPS, so we need to interpret the HTTP header.
Any idea how to do this?
Thanks Simon