Hello, strange issue with the feature `HttpsRedirect`, when I go to my home page http://{...}/login ...

# ktor

[vincent.brule]

Hello, strange issue with the feature HttpsRedirect, when I go to my home page http://{...}/login I have an error because ktor redirect my to https like an infinite loop...

[vincent.brule]

It’s really strange because in the dev console, I saw that https://{...} is also redirect

[Deactivated User]

in addition to the HttpsRedirect, are you using manual redirections somewhere? https://ktor.io/servers/calls/responses.html#redirections

or using an interceptor or feature that do redirections?

[vincent.brule]

I used in one place redirect : get(“/”) {
return@get call.respondRedirect(“/front”)
}

[vincent.brule]

When you go to / to redirect you to /front

[Deactivated User]

do you use the oauth feature or something?

[vincent.brule]

Yes I use this feature for google authentication

[Deactivated User]

aha

[Deactivated User]

I think the oauth perform redirects, so it could be related (or not), but could be related

[Deactivated User]

specially because of the login route

[vincent.brule]

But just to access the page to authentication, I have infinite loop...

[Deactivated User]

if you access https:// … /login, it works?

[Deactivated User]

only happens with http://?

[vincent.brule]

Before authentication

[vincent.brule]

No with all routes

[Deactivated User]

have you configured oauth to have https:// directly?

[Deactivated User]

I would disable interceptors, features, one by one to see if something is interfering to locate the problem.

Also you can just return call.respondText("OK") in the login route to not do anything else and then, and if it works, move that line down until the issue happens

[Deactivated User]

to determine what’s causing the issue

[vincent.brule]

oauth is configure to /login so I don’t know…

[vincent.brule]

Yes but I can’t test https on localhost so It’s a little complicated … 😞

[vincent.brule]

The strange thing is in dev console, I have request to https and the response is the redirection

[vincent.brule]

In addition, For the first route, I just send the first page of my front app so no authentication issue,I really don’t understand

[vincent.brule]

I remove all features but the problem still persists

[Deactivated User]

can’t you use a self-signed certificate for that? And accept in your browser? (if you are using https, might worth investing some time in that)

[Deactivated User]

have you tried to log things with the verbosest log level, to see if you see something strange?

[vincent.brule]

No how I do this please (log) ? I can’t use the certificat because its my company and I don’t have access to it 😞

[vincent.brule]

I enable log and nothing strange..

[Deactivated User]

you don’t need that specific certificate

[Deactivated User]

you need a self-signed one

[Deactivated User]

https://ktor.io/servers/self-signed-certificate.html

[vincent.brule]

I will try thanks

[vincent.brule]

So I succeed with self certificate. In this url https://localhost:8443/front I haven’t the problem with infinite loop

[vincent.brule]

But on my prod server, I still have the problem so don’t know how to debug it…

[Deactivated User]

uhm

[Deactivated User]

let me ask

[vincent.brule]

Thanks

[Deactivated User]

After some troubleshooting we have figured out what was the problem and I’m going to update the documentation and the FAQ.

For the record:
There was a reverse-proxy/load balancer that was serving https, and making normal http requests to the ktor backend. The HttpsRedirect feature was installed but not the XForwardedHeaderSupport, thus the ktor backend believes that the request is always http and makes the redirect.

[Deactivated User]

https://github.com/ktorio/ktorio.github.io/commit/24eeb48a423a99667d0f9cdd79ecb7ff027a396d