Details
-
New Feature
-
Status: Closed
-
Major
-
Resolution: Fixed
-
5.0.6
-
None
Description
In general, some pages in an application should be https access only, the rest are good for http.
Tapestry should manage this automatically, using configuration, or an annotation, on pages to indicate they need to be protected via https.
A rare case is a form, usually a login form, that is duplicated throughout the application on otherwise non-protected pages. The Form component needs a parameter to force the submit request to be HTTPS.