Question

I have a login page that I would like to show in https. After validating the user, I would like to transfer him back to http.

So I declared in web.xml

<security-constraint>
  <web-resource-collection>
   <web-resource-name>Login and Restricted Space URLs</web-resource-name>
   <url-pattern>/general/enter.jsf</url-pattern>
  </web-resource-collection>  
  <user-data-constraint>
   <transport-guarantee>CONFIDENTIAL</transport-guarantee>
  </user-data-constraint>
 </security-constraint>

 <security-constraint>
  <web-resource-collection>
   <web-resource-name>Rest of the Application</web-resource-name>
   <url-pattern>/general/home.jsf</url-pattern>
     </web-resource-collection>
  <user-data-constraint>
   <transport-guarantee>NONE</transport-guarantee>
  </user-data-constraint>
 </security-constraint>

and I see that the login page is in https.

But in my action:

public String doLogin() throws Exception {
  ...
  User user = service.getUserByNameAndCompany(name, company);
  ......
                return "/general/home.jsf";
 }

The bean redirects the user to

https ://mycomputer:8443/MYProject/general/home.jsf

and I would like it to be back

http: //mycomputer:8080/MYProject/general/home.jsf

How can I do it?

Answer 1

JSF navigation will redirect you to a page within the same application (that means you can navigate only inside https: //mycomputer:8080/MYProject ).

What you can do is to navigate to a page like /general/redirect.jsf and from there use a header or javascript redirection to the url you want.