HTTPS login with Spring Security redirects to HTTP
Your spring configuration should be agnostic to the used protocol. If you use something like “requires-channel”, you’ll run into problems sooner or later, especially if you want to deploy the same application to a development environment without https. Instead, consider to configure your tomcat properly. You can do this with RemoteIpValve. Depending on which headers … Read more