How to define REQUIRES_SECURE_CHANNEL in Security 2.0?

[thejavafreak]

Dear all,

I want to secure a specific URL. How do I define REQUIRES_SECURE_CHANNEL in Spring Security 2.0? I can't find it anywhere. Neither does the samples shows us this.

thanks in advance

[Luke Taylor]

Use the requires-channel attribute on the intercept-url element.

You can see the available options in the namespace from the RNC file

http://acegisecurity.svn.sourceforge...curity-2.0.rnc

Or just by navigating the options in a decent XML editor.

[thejavafreak]

Thanks for the response luke,

I already put requires-channel="any" and it still doesn't work. Could it be perhaps because my URL is transformed by URWRewrite?

thanks in advance

[Luke Taylor]

"any" means it doesn't care what channel you use so will accept either http or https. The equivalent of REQUIRES_SECURE_CHANNEL would be requires-channel="https".