By: Sakit Atakishiyev user 21 Jun 2018 at 5:35 a.m. CDT

6 Responses
Sakit Atakishiyev gravatar
Hi. I want to know that why gluu server redirect me to `http` page even income request is https?. For example when I call login page of the gluu server I call with https but system redirect me to http page first then redirect to https. This creates extra request to gluu server.

By Mohib Zico Account Admin 21 Jun 2018 at 10:37 a.m. CDT

Mohib Zico gravatar
Hello Sakit, In which stage you see that?

By Sakit Atakishiyev user 22 Jun 2018 at 12:53 a.m. CDT

Sakit Atakishiyev gravatar
If you want to reproduce just open chrome inspect(check preserve log to see all redirection) then enter the gluu login page and check all response url. For example login.htm page return with http then redirect to https

By Mohib Zico Account Admin 27 Jun 2018 at 4:41 a.m. CDT

Mohib Zico gravatar
I think I understand what you are mentioning. Thanks for the report. Will dig deep....

By Sakit Atakishiyev user 06 Aug 2018 at 5:16 a.m. CDT

Sakit Atakishiyev gravatar
I have an old machine which is the installed gluu server version 3.0.1. I check that version too. There is no any http redirection on version 3.0.1. I see this problem on version 3.1.3

By Mohib Zico Account Admin 06 Aug 2018 at 5:23 a.m. CDT

Mohib Zico gravatar
Thanks for your feeback on this. I create a github issue on this: https://github.com/GluuFederation/oxAuth/issues/866 Let's continue conversation there.