title: Force SSL based on url pattern in Spring security 3.2?
body: <p>I am trying to configure my SS3.2 to do something quite simple: reject any HTTP request that's not directed at my login service; and allow access to the login service without authorization.</p>
  
  <p>I have the following in my <code>security.xml</code>:</p>
  
  <pre><code>&lt;http pattern="/login/**" security="none" /&gt;
  &lt;!--
      &lt;intercept-url pattern="/login/**"  access="permitAll" requires-channel="https"/&gt;
  --&gt;
  
  &lt;http auto-config="true" use-expressions="true"&gt;
      &lt;custom-filter ref="myCustomFilter" before="BASIC_AUTH_FILTER" /&gt;
  &lt;/http&gt;
  </code></pre>
  
  <p>Now since the login service will transport authentication information, it obviously needs to be secured by SSL/TLS. But I can't figure out how to force it to use SSL/TLS, while still letting it skip the custom filter.</p>
  
  <p>Any suggestions?</p>