Enforce HTTPS about securesocial HOT 4 CLOSED

Hi Jan,

Annotating the SecureSocial and UsernamePasswordController with a let's say @with(ForceSSL.class) controller that has a @before to redirect when needed sounds good to me.

I don't think your approach is wrong.

Jorge

from securesocial.

Hi Jorge,

thanks for your reply. I guess the interceptor is in fact the way to go.

But how would one actually do it in an elegant way? I'd like to avoid manipulating the original SecureSocial controllers for my project, which would be the easiest way, indeed. On the other hand, I cannot simply create a new controller with my ForceSSL mixin and then delegate to the SecureSocial controllers (or at least I did not find a way that worked). So I'd have to duplicate SecureSocial's code in my controller...

Do you have any idea?

Greets,
Jan.

from securesocial.

Hi @jtammen, what did you do with this?

from securesocial.

@jaliss was there any progress to this for the Play v1.2.x stream?

from securesocial.