Merge pull request #16 from ccnmtl/infra-2595-CAS-force-SSL-service-url

INFRA-2595: Add CAS_CAS_FORCE_SSL_SERVICE_URL setting
ccnmtl · Oct 23, 2023 · e7254a0 · e7254a0
2 parents b3227b5 + 2e4fb9f
commit e7254a0
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/ctlsettings/shared.py b/ctlsettings/shared.py
@@ -148,6 +148,10 @@ def common(**kwargs):
     CAS_ADMIN_REDIRECT = False
     CAS_MAP_AFFILIATIONS = True
 
+    # Force the service url to always target HTTPS.
+    # https://djangocas.dev/docs/latest/configuration.html#cas-force-ssl-service-url-optional
+    CAS_FORCE_SSL_SERVICE_URL = True
+
     # Translate CUIT's CAS user attributes to the Django user model.
     # https://cuit.columbia.edu/content/cas-3-ticket-validation-response
     CAS_APPLY_ATTRIBUTES_TO_USER = True