Comment 4 for bug 621326

Revision history for this message
Anthony Lenton (elachuni) wrote :

Hm, I don't really know what all the LAZR_RESTFUL_USE_HTTPS setting affects. Putting together the urls served for sure, but it would be great if it refused to serve over http some object or method that is configured to be served over https (and possibly vice-versa). I imagine Apache could take care of bouncing you over to https if you try to access https-only resources, but ideally lazr.restful would check too.

At the moment if you try to just access a top level collection within a service root configured for http using an https URL (or vice-versa) it fails with
NotImplementedError: Can't look up definition in another url (http(s)://foo.bar.baz/...)