Handling X-FORWARDED-PROTO header in Java web application

Question

Can any one guide me in working with X-FORWARDED-PROTO header in Java web application deployed to Apache Tomcat.

The application setup is in such a way that tomcat talks

Answer 1

Add this to your apache vhost managing connections

  ...
  RewriteEngine On
  RewriteCond %{HTTP:X-Forwarded-Proto} !https
  RewriteRule !/status https://%{SERVER_NAME}%{REQUEST_URI} [L,R]

this assumes your health check is /status, which doesn’t require https