requiresChannel

fun requiresChannel(requiresChannelConfiguration: RequiresChannelDsl.() -> Unit)

Deprecated

since 6.5 use redirectToHttps instead

Allows configuring channel security based upon the HttpServletRequest

Example:

@Configuration
@EnableWebSecurity
class SecurityConfig {

@Bean
fun securityFilterChain(http: HttpSecurity): SecurityFilterChain {
http {
requiresChannel {
secure("/public", requiresInsecure)
secure(anyRequest, requiresSecure)
}
}
return http.build()
}
}

Parameters

requiresChannelConfiguration

custom configuration that specifies channel security

See also