Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-113260

X-Forwarded-* headers are not being honored when generating Password Reset links

Details

    Description

      Steps to reproduce

      1. Setup Apache Web Server
        • With SSL
        • Including the following properties:
          RequestHeader set X-Forwarded-Proto "https"
          ProxyPreserveHost on
          
      2. Start the apache web server
      3. Setup Liferay
        • Add the following properties to the portal-ext.properties file:
          web.server.http.port=80
          web.server.https.port=443
          web.server.forwarded.protocol.enabled=true
          
      4. Startup Liferay
      5. Navigate to your Liferay instance, via https (e.g. https://localhost)
      6. Configure the settings in Control Panel -> Server Administration -> Mail
        • As needed to receive email
      7. Logout
      8. Click Sign in > Forget Password
        • Reset the password for a user

       Expected Result: An https link will be sent within the Password Reset email
       Actual Result: An http link is sent within the Password Reset email.

      Attachments

        Issue Links

          Activity

            People

              della.wang Della Wang (Inactive)
              eric.yan Eric Yan
              Kiyoshi Lee Kiyoshi Lee
              Eric Yan Eric Yan
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:
                2 years, 19 weeks, 4 days ago

                Packages

                  Version Package
                  7.2.10 DXP FP15
                  7.2.X
                  7.3.3 CE GA4
                  7.3.10 DXP GA1
                  Master