Hi everyone, I've been reading documentation and discussions like crazy but still can't find an adequate solution to this. At this point I've probably gone off in the wrong direction and am missing a simpler solution, so if anyone has any ideas it would be of great benefit to my future mental health. Is anyone using repoze.what on https, and if so, how do you get around redirects to http links?
I should note that I'm using webfaction as a web host, and their https apps don't handle http. I'd have to launch a separate static app with http to use mod_rewrite or anything at the server level, which seems like a very expensive solution when it's either the repoze.what or Pylons code generating the http urls. Thanks in advance for any tips! Eric On Tue, Dec 7, 2010 at 11:31 PM, Eric Rasmussen <[email protected]>wrote: > Hello, > > I'm having an issue with Pylons/repoze.what and https. Everything is > configured correctly and working as intended, except that the repoze.what > login_handler and logout_handlers are redirecting to http instead of https. > > I have an add_auth function in the middleware (gratefully borrowed from > this tutorial > http://sarafsaurabh.wordpress.com/2010/08/10/pylons-authentication-and-authorization-using-repoze-what/), > and these are the login/logout handler lines (which I should note work > correctly when I'm not using https): > > login_handler='/account/login_handler', > logout_handler='/account/logout', > > Does anyone know of a config option that would force the logout and failed > login redirects to be https? > > I use protocol='https' in url redirects in my other controllers, but that > won't work here because the login/logout handlers aren't calling real > controller actions (I have no controller named 'account'), and trying to > force a full URL like https://mysite.com/account/login_handler correctly > results in a 404 error. > > Thanks! > Eric > > -- You received this message because you are subscribed to the Google Groups "pylons-discuss" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/pylons-discuss?hl=en.
