Hi Lenya devs,
virtually every proxy setup redirects the login usecase to https:
# Redirect the login usecase to https
RewriteCond %{QUERY_STRING} (.*)lenya\.usecase=ac\.login(.*)
RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [R,L]
Maybe it would make sense to let Lenya do this?
<usecase id="ac.login" ssl="true">
<role id="session" method="grant"/>
</usecase>
Another question is if requiring SSL should (optionally?) be inherited
to sub-pages. I wanted to configure the docu publication to require SSL
for all authoring+archive+transh pages, but ATM this would mean to click
the SSL checkbox manually for every single page. IMO it would be nice if
we could enable SSL for complete areas.
WDYT?
-- Andreas
--
Andreas Hartmann, CTO
BeCompany GmbH
http://www.becompany.ch
Tel.: +41 (0) 43 818 57 01
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
