Fix: Force https for all requests

2023-10-20 13:20:18 +02:00
parent 826b634346
commit d5a573124b
1 changed files with 2 additions and 1 deletions
@@ -21,7 +21,8 @@ security:
                path: app_security_logout
                target: app_security_login
    access_control:
-        - { path: ^/profile, roles: ROLE_USER }
+        - { path: '^/profile', roles: ROLE_USER, requires_channel: https }
+        - { path: '^/', roles: PUBLIC_ACCESS, requires_channel: https }

 when@test:
    security: