How do I configure ASP.Net OutputCache to vary by http vs https?

前端 未结 3 1395
别那么骄傲
别那么骄傲 2021-02-13 10:44

Here is the scenario, a user opens up non-secure page from our WebApp, let\'s call it PageA, in their browser and then clicks a link in there that takes them to a secure instanc

相关标签:
3条回答
  • 2021-02-13 11:21

    This doesn't answer the question as worded but it may eliminate your need to vary by scheme. If you are hard coding the "http://" for the Scene7 urls you can change them to scheme-relative urls.

    <img src="http://site.scene7.com/images/someimage.jpg" />
    =>
    <img src="//site.scene7.com/images/someimage.jpg" />
    

    That will cause the browser to automatically ask for the resource with the same scheme as the referring page. That's assuming you have an SSL certificate for your scene7 domain of course.

    0 讨论(0)
  • 2021-02-13 11:37

    I think that you can do a VaryByCustom="scheme" and add this to your Global.asax.cs file (inlcuding a couple other others that I use as well app version & user):

        public override string GetVaryByCustomString(HttpContext context, string custom)
        {
            if (custom.Equals("version", StringComparison.CurrentCultureIgnoreCase))
            {
                Assembly asm = Assembly.GetExecutingAssembly();
                string[] parts = asm.FullName.Split(',');
                string version = parts[1].Trim().ToLower();
                return version;
            }
            else if (custom.Equals("user", StringComparison.CurrentCultureIgnoreCase))
            {
                var user = Membership.Users.CurrentUser;
                return null == user ? string.Empty : user.Id.ToString();
            }
            else if (custom.Equals("scheme", StringComparison.CurrentCultureIgnoreCase))
            {
                var scheme = context.Request.IsSecureConnection ? "https" : "http";
                return scheme;
            }
            else
                return base.GetVaryByCustomString(context, custom);
        }
    
    0 讨论(0)
  • 2021-02-13 11:38

    I've never tried it but you might be able to use the Outputcache VaryByHeader property and the "host" header, which specifies the Internet host and port number of the resource being requested.

    The question I'd have is why are you redirecting to PageA over secure after from PageB. If its a non-secure page, couldn't you fix the PageB redirect to always redirect to non-secure.

    0 讨论(0)
提交回复
热议问题