Hello, 

 I'm using docker.osgeo.org/geoserver:2.24.0 and regardless of the settings 
used, the login form always generates an HTTP:// URL even if the rest of the 
site is HTTPS://

        <form class="d-inline-block" method="post" 
action="http://{HOST}/geoserver/j_spring_security_check";>

Being the specific chunk of code, the logout is also hardcoded to http it 
appears. 

The following headers are being passed by NGINX

      proxy_set_header      X-Forwarded-Proto https;
      proxy_set_header      X-Real-IP $remote_addr;
      proxy_set_header      X-Forwarded-For $proxy_add_x_forwarded_for;

The following settings are enabled in Geoserver

 Use headers for Proxy URL
 Enable global services
 Allow Per-Workspace Stored Queries

Setting the URL manually does not correct it either. Hilariously the login is 
the _only_ thing that really needs to be HTTPS >.<) 

-Karl 

_______________________________________________
Geoserver-users mailing list

Please make sure you read the following two resources before posting to this 
list:
- Earning your support instead of buying it, but Ian Turton: 
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines: 
http://geoserver.org/comm/userlist-guidelines.html

If you want to request a feature or an improvement, also see this: 
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer


Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Reply via email to