Update RequestAuthenticator.java

This commit is contained in:
wildloop 2017-03-15 09:14:48 +01:00 committed by GitHub
parent 366dee6575
commit 80c9e23282

View file

@ -160,8 +160,7 @@ public abstract class RequestAuthenticator {
} }
protected boolean verifySSL() { protected boolean verifySSL() {
if (!facade.getRequest().isSecure() if (!facade.getRequest().isSecure() && deployment.getSslRequired().isRequired(facade.getRequest().getRemoteAddr())) {
&& deployment.getSslRequired().isRequired(facade.getRequest().getRemoteAddr())) {
log.warnf("SSL is required to authenticate. Remote address %s is secure: %s, SSL required for: %s .", log.warnf("SSL is required to authenticate. Remote address %s is secure: %s, SSL required for: %s .",
facade.getRequest().getRemoteAddr(), facade.getRequest().isSecure(), deployment.getSslRequired().name()); facade.getRequest().getRemoteAddr(), facade.getRequest().isSecure(), deployment.getSslRequired().name());
return true; return true;