title: Spring Security: requires-channel="https" behind SSL accelerator
body: <p>We're using an F5 BIG-IP device to terminate SSL connections and connecting by plain HTTP to the application server with an spring enabled application. Also we configured F5 to send an X-Forwarded-Proto header with http or https as value.</p>
  
  <p>Now we'd like to enforce HTTPS by configuring an intercept url:</p>
  
  <pre><code>&lt;security:intercept-url pattern="/login.action" requires-channel="https" /&gt;
  </code></pre>
  
  <p>But this only works if the protocol scheme in the servlet containter is HTTPS, so we need to interpret the HTTP header.</p>
  
  <p>Any idea how to do this? </p>
  
  <p>Thanks
  Simon</p>