Making WebGroups queries HTTPS-only

Andrew Taylor — Fri, 07 Jul 2017 15:09:08 GMT

Hi Matt,

Having just checked all of our calls to webgroups they all use https so don't worry about Economics or any "mydept" instance.

Andrew

Making WebGroups queries HTTPS-only

Mathew Mannion — Thu, 06 Jul 2017 13:11:06 GMT

We would like to make access to WebGroups over HTTPS mandatory. Currently, we accept requests to both http://webgroups.warwick.ac.uk and https://webgroups.warwick.ac.uk - this change will mean that all requests to the former will result in a 301 redirect to the latter.

For the most part, this change should be seamless. The query API is called typically via a HTTP GET so requests for (e.g.) http://webgroups.warwick.ac.uk/query/user/cuscav/groups will be seamlessly rewritten to https://webgroups.warwick.ac.uk/query/user/cuscav/groups with no appreciable change in performance. You can avoid the extra redirect by changing your applications now to go directly to the HTTPS version of the URLs.

This may have an impact if you have scripts that access the WebGroups API as the 301 redirect will mean the POST body of requests is lost. If you use the WebGroups API to manage groups, please update your scripts to point to the HTTPS version as soon as possible to avoid being impacted by this change.

Barring strong objections, we intend to make this change on Monday 17th July 2017.

IDG » Web Sign On » Making WebGroups queries HTTPS-only

Making WebGroups queries HTTPS-only

Making WebGroups queries HTTPS-only