force rest API to use HTTPS protocol

[Mohammad Hesabi]

I need to force using https protocol on rest/api (I mean https://domain.com/rest/api/*) but unfortunately I couldn't manage to do that.

I've modified WEB-INF/web.xml and added these lines:

<security-constraint>
<display-name>HTTP to HTTPs Redirection</display-name>
<web-resource-collection>
<web-resource-name>all-except-attachments</web-resource-name>
   <url-pattern>*.jsp</url-pattern>
   <url-pattern>*.jspa</url-pattern>
   <url-pattern>/rest/*</url-pattern>
   <url-pattern>/browse/*</url-pattern>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>

but still it's possible to load rest api using http protocol.  Of course my JIRA site is force to https method but not rest API

http://domain.com => it's always redirects to https

http://domain.com/rest/api/* => not redirects to https

Can anyone point me how I manage to force using https protocol on rest api?

[Jeremy Maziarz]

I'm having the same issue. Were you able to find a resolution?