Expeditor Developers: Transport level security (HTTPS)

The Portlet specification requires that Portlets which must be accessed through HTTPS specify a security-constraint in the portlet.xml.

The following is an example of a security-constraint indicating that the Portlet TestPortlet be allowed access only through HTTPS.

<security-constraint>
	<display-name>Secure Portlets</display-name>
	<portlet-collection>
		<portlet-name>TestPortlet</portlet-name>
	</portlet-collection>
	<user-data-constraint>
		<transport-guarantee>CONFIDENTIAL</transport-guarantee>
	</user-data-constraint>
</security-constraint>