From 3b4174f1273818d1a01080ed8a97715c38e74e37 Mon Sep 17 00:00:00 2001
From: "jocuri%softhome.net" <>
Date: Sun, 16 Jan 2005 21:09:56 +0000
Subject: Patch for bug 260682: Support redirecting to HTTPS always or for
 authenticated sessions only; patch by Byron Jones (glob)
 <bugzilla@glob.com.au>, r=vladd, a=myk.

---
 Bugzilla/Auth/Login/WWW/CGI.pm | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'Bugzilla/Auth/Login/WWW/CGI.pm')

diff --git a/Bugzilla/Auth/Login/WWW/CGI.pm b/Bugzilla/Auth/Login/WWW/CGI.pm
index a66ce7425..10eb85f60 100644
--- a/Bugzilla/Auth/Login/WWW/CGI.pm
+++ b/Bugzilla/Auth/Login/WWW/CGI.pm
@@ -135,6 +135,12 @@ sub login {
     # No login details were given, but we require a login if the
     # page does
     if ($authres == AUTH_NODATA && $type == LOGIN_REQUIRED) {
+
+        # Redirect to SSL if required
+        if (Param('sslbase') ne '' and Param('ssl') ne 'never') {
+            $cgi->require_https(Param('sslbase'));
+        }
+    
         # Throw up the login page
 
         print Bugzilla->cgi->header();
-- 
cgit v1.2.3-24-g4f1b