原http服务升级为https服务后,发现同级域名下的单点登录不可用,报错:
The page at 'https://aaa.xxx.com' was loaded over HTTPS, but requested an insecure frame 'http://bbb.xxx.com/rostrum/index.html'. This request has been blocked; the content must be served over HTTPS.
请求为https,然后发现跳转拼接的跳转请求也是https,但是单点登录后重定向指向为http,被浏览器认为跨域,请求被拦截
大致请求流程如下:
用户---https请求--->nginx配置---http请求--->应用
添加了nginx策略配置 :proxy_redirect http:// https://; 解决问题
参考下面文章