实际上，理想情况下，这是在Web应用程序的web.xml文件中配置的。您只需指定某些URL即可安全，<security-constraint><web- resource-collection>并将HTTPS要求指定为<transport- guarantee>值CONFIDENTIAL。容器将透明地管理重定向。简单。

<security-constraint>
  <web-resource-collection>
     <web-resource-name>My Secure Stuff</web-resource-name>
     <url-pattern>/some/secure/stuff/*</url-pattern>
     <url-pattern>/other/secure/stuff/*</url-pattern>
     ...
  </web-resource-collection>
  <user-data-constraint>
     <transport-guarantee>CONFIDENTIAL</transport-guarantee>
  </user-data-constraint>
</security-constraint>