INFRA-2595: Add CAS_CAS_FORCE_SSL_SERVICE_URL setting

ccnmtl · Oct 23, 2023 · 2e4fb9f · 2e4fb9f
1 parent b3227b5
commit 2e4fb9f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/ctlsettings/shared.py b/ctlsettings/shared.py
@@ -148,6 +148,10 @@ def common(**kwargs):
     CAS_ADMIN_REDIRECT = False
     CAS_MAP_AFFILIATIONS = True
 
+    # Force the service url to always target HTTPS.
+    # https://djangocas.dev/docs/latest/configuration.html#cas-force-ssl-service-url-optional
+    CAS_FORCE_SSL_SERVICE_URL = True
+
     # Translate CUIT's CAS user attributes to the Django user model.
     # https://cuit.columbia.edu/content/cas-3-ticket-validation-response
     CAS_APPLY_ATTRIBUTES_TO_USER = True