Defining requires-channel in security config xml in Hybris

[former_member665620]

Hello All,

In Spring security config XML, we will define requires-channel as HTTP or HTTPS. For each URL, we will define requires-channel.

If all URLs are HTTPS only, is there any possility to define requires-channel as HTTPS at single place/method instead of defining for every url.

Thanks in Advance,

Raghavendra.

[tsang · Accepted solution]

Hello Raghavendra

this question does not relate to SAP Commerce. But anyway, it is possible to refactor your xml / coding and set https as default

https://www.baeldung.com/spring-channel-security-https

However - in case of security I would not recommend that. Imagine someone sets the http back to active (even by accident) and your whole application will be automatically vulnerable