Sonar

Sonar behind a HTTPS reverse proxy sometimes fall back to HTTP

Details

  • Type: Bug Bug
  • Status: Closed Closed
  • Priority: Major Major
  • Resolution: Not A Bug
  • Affects Version/s: 2.6
  • Fix Version/s: None
  • Component/s: Infrastructure, Web
  • Labels:
    None
  • Number of attachments :
    0

Description

Using sonar through a https connection causes fall back to HTTP instead of HTTPS

Some of the cases where this fall back is happening are:
*login/logout
*operations with filters
*operations with quality profiles (save, copy and make default)

(as a workaround it should be possible to configure reverse-proxy to redirect all requests for Sonar without SSL to Sonar with SSL)

Issue Links

is related to

Bug - A problem which impairs or prevents the functions of the product. SONAR-1986 Problem with reverse proxy and https

  • Major - Major loss of function.
  • Closed - The issue is considered finished, the resolution is correct. Issues which are not closed can be reopened.

Bug - A problem which impairs or prevents the functions of the product. SONAR-270 Sonar behind a HTTPS reverse proxy sometimes fall back to HTTP

  • Minor - Minor loss of function, or other problem where easy workaround is present.
  • Closed - The issue is considered finished, the resolution is correct. Issues which are not closed can be reopened.

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
André Ribeiro added a comment -

Same happens in:

  • Edit user
Show
André Ribeiro added a comment - Same happens in: Edit user
Hide
Permalink
Julien Lancelot added a comment -

The login/logout still redirect to HTTP

Show
Julien Lancelot added a comment - The login/logout still redirect to HTTP
Hide
Permalink
Freddy Mallet added a comment -

In fact fixing this issue doesn't require any update on Sonar server side : the proxy must be configured to set the value "X_FORWARDED_PROTO: https" in each HTTP request header. This parameter is required by the Ruby On Rails stack to correctly perform redirection.

Show
Freddy Mallet added a comment - In fact fixing this issue doesn't require any update on Sonar server side : the proxy must be configured to set the value "X_FORWARDED_PROTO: https" in each HTTP request header. This parameter is required by the Ruby On Rails stack to correctly perform redirection.

People

  • Assignee:
    Freddy Mallet
    Reporter:
    André Ribeiro
Vote (1)
Watch (4)

Dates

  • Created:
    Updated:
    Resolved: