Switch back to HTTP after HTTPS page

[Nick White Ro]

I have 3 pages that send a user's password to the server, so I need them to be sent over SSL. So I declared them in the DD:

    <security-constraint>
        <web-resource-collection>
            <web-resource-name>Pages that use password</web-resource-name>
            <url-pattern>/registerUser.do</url-pattern>
            <url-pattern>/login.do</url-pattern>
            <url-pattern>/changePassword.do</url-pattern>
        </web-resource-collection>
        <user-data-constraint>
            <transport-guarantee>CONFIDENTIAL</transport-guarantee>
        </user-data-constraint>
    </security-constraint>

The problem is that, after I leave one of the pages (and I no longer need SSL), all the web app links are still pointing to the secure mode, so I can't switch back to "normal" mode:
* before: HTTP://<host>:8080/path
* after: HTTPS://<host>:8181/path

How can I solve this problem?

[William Brogden]

When you create the links you will have to build in "http" - otherwise the browser assumption of https will continue.

Bill

[Nick White Ro]

Yes, but is there a way to build the links with full path without hard-coding the host name, the port and the app name?

[Mark E Hansen]

Nick White Ro wrote:Yes, but is there a way to build the links with full path without hard-coding the host name, the port and the app name?

Yes. Have a look at the methods on the HttpServletRequest object (and it's super object, ServletRequest).
There are methods like getServerName(), getScheme(), getProtocol(), getLocalPort(), getServletPath() and so on.