javascript JQuery.ajax 不使用 HTTPS
声明：本页面是StackOverFlow热门问题的中英对照翻译，遵循CC BY-SA 4.0协议，如果您需要使用它，必须同样遵循CC BY-SA许可，注明原文地址和作者信息，同时你必须将它归于原作者（不是我）：StackOverFlow
原文地址: http://stackoverflow.com/questions/13054842/
Warning: these are provided under cc-by-sa 4.0 license. You are free to use/share it, But you must attribute it to the original authors (not me):
StackOverFlow
JQuery.ajax not using HTTPS
提问by Rob
So, I am calling a web service from jQuery using the .ajax method. The page that is calling the method is an HTTPS/SSL page, yet when the call is made, jQuery keeps making an HTTP request and it is failing because the server is set up to redirect all HTTP traffic to HTTPS...so a 301 error is coming back.
因此，我使用 .ajax 方法从 jQuery 调用 Web 服务。调用该方法的页面是 HTTPS/SSL 页面，但是在进行调用时，jQuery 不断发出 HTTP 请求并且失败，因为服务器设置为将所有 HTTP 流量重定向到 HTTPS...所以 301错误又回来了。
I have inspected my code a million times and tried a million ways to generate the url parameter for the ajax query. (using // for relative and now just appending the protocol https to the beginning of the url. Here is my javascript:
我已经检查了我的代码一百万次，并尝试了一百万种方法来为 ajax 查询生成 url 参数。（使用 // 表示相对，现在只是将协议 https 附加到 url 的开头。这是我的 javascript：
function add_inbound_record(serial_number, pass_fail_value)
{
pfv = pass_fail_value.toUpperCase();
url = location.protocol + "//" + location.hostname + "/inbound/record- inspection/" + serial_number + "/" + pfv;
$.ajax({
url:url,
cache:false,
});
}
So, when this code executes, I check the url paramter in firebug and it shows up correctly with https and the URL properly formed. However, when I execute the ajax function I see this in firebug:
所以，当这段代码执行时，我检查了 firebug 中的 url 参数，它正确显示了 https 和正确格式的 URL。但是，当我执行 ajax 函数时，我在 firebug 中看到了这一点：
301 MOVED PERMANENTLY
192.168.1.9
20 B
192.168.1.9:443
Response Headersview source
Connection keep-alive
Content-Encoding gzip
Content-Length 20
Content-Type text/html; charset=utf-8
Date Wed, 24 Oct 2012 17:33:34 GMT
Location http://192.168.1.9/inbound/record-inspection/011234567890123421000000002995/P/?_=1351100020609
Server nginx/1.1.19
Vary Accept-Encoding
Request Headersview source
Accept */*
Accept-Encoding gzip, deflate
Accept-Language en-us,en;q=0.5
Connection keep-alive
Cookie djdt=hide; csrftoken=sF9RUxrlS6IKURxOryH2d2yT05gMighn; sessionid=9682390da4011e445931643c81be9aae
Host 192.168.1.9
Referer https://192.168.1.9/fingerprint/inspect/
User-Agent Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:15.0) Gecko/20100101 Firefox/15.0.1
X-Requested-With XMLHttpRequest
As you can see above from the referrer, the protocol is HTTPS yet the location in the response header is HTTP? I can't for the life of me figure out why the request is going across the wire as HTTP and not HTTPS. The 301 response is accurate considering it is going as HTTP since, again, the webserver is configured to only allow HTTPS access. Any ideas?
正如您在上面从引用者看到的，协议是 HTTPS 而响应头中的位置是 HTTP？我一生都无法弄清楚为什么请求是作为 HTTP 而不是 HTTPS 通过网络传输的。考虑到它是 HTTP，301 响应是准确的，因为再次将 Web 服务器配置为仅允许 HTTPS 访问。有任何想法吗？
回答by Rob
Ok. I messed with this for over 4 hours and as soon as I added a slash to the end of the URL, the issue went away and everything works fine. I have no idea why. The web server/web service does not require a slash to function correctly but for whatever reason, that's what "fixed" it. Thanks for the helpful comments guys.
行。我搞砸了 4 个多小时，一旦我在 URL 的末尾添加了一个斜杠，问题就消失了，一切正常。我不知道为什么。Web 服务器/Web 服务不需要斜线即可正常运行，但无论出于何种原因，这就是“修复”它的原因。感谢您提供有用的评论。
回答by Jitendra Kumar Yadav
I was also very upset regarding the same problem. I was sending the ajax request from my ssl page as follows:
对于同样的问题，我也很不高兴。我正在从我的 ssl 页面发送 ajax 请求，如下所示：
$protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' ||
$_SERVER['SERVER_PORT'] == 443) ? "https://" : "http://";
<script type="text/javascript">
$.ajax({
url: "<?php echo $protocol.$_SERVER['HTTP_HOST'].$this->url(array("action"=>"autocomplete", "controller"=>"ajax", "module"=>"default"));?>",
data: { term: $("#keyword").val()},
dataType: "json",
type: "POST",
success: function(data){
response(data);
}
});
</script>
The problem was that, request header shows that the referer page is an ssl page but the response header shows the location an "http" page as in above Rob's code printscreen.
问题是，请求标头显示引用页面是一个 ssl 页面，但响应标头显示的位置是一个“http”页面，如上面 Rob 的代码打印屏幕所示。
I came to know that each and every time when you make an ajax request from an ssl page response came to the same page i.e. for ssl page and when you make the ajax request from non-ssl page by the response will came for the same i.e. non-ssl page. This is the default rule for ajax request and response.
我开始知道，每次从 ssl 页面发出 ajax 请求时，响应都会到达同一页面，即 ssl 页面，而当您从非 ssl 页面发出 ajax 请求时，响应也会出现相同的 ie非ssl页面。这是ajax请求和响应的默认规则。
I think, definitely there must be a problem from my code side which force to make response from http while sending from https. Exactally, my suspicion was right. Actually there was a default code which force to redirect to response to http page instead of https. I am sharing the previous code:
我认为，我的代码方面肯定有问题，它在从 https 发送时强制从 http 做出响应。没错，我的猜测是对的。实际上有一个默认代码强制重定向到 http 页面而不是 https 的响应。我正在分享以前的代码：
class Custom_Customplugins extends Zend_Controller_Plugin_Abstract
{
public function preDispatch(Zend_Controller_Request_Abstract $request)
{
$action = $request->getActionName();
$controller = $request->getControllerName();
$module = $request->getModuleName();
$protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) ? "https://" : "http://";
$host = $_SERVER['HTTP_HOST'];
if($host != "www.xyz.com")
{
if($protocol == "http://")
{
}
}
else
{
$r = new Zend_Controller_Action_Helper_Redirector();
$u = new Zend_Controller_Action_Helper_Url();
if(
($action == "index" && $controller == "index" && $module == "default")
|| ($action == "login" && $controller == "index" && $module == "default")
|| ($action == "businessownerregistration" && $controller == "index" && $module == "default")
|| ($action == "customerregistration" && $controller == "index" && $module == "default")
|| ($action == "index" && $controller == "changepwd" && $module == "admin")
|| ($action == "index" && $controller == "businessowner" && $module == "businessowner")
|| ($action == "changepwd" && $controller == "serviceprovider" && $module == "businessowner")
|| ($action == "index" && $controller == "customer" && $module == "default")
)
{
if($protocol == "http://")
{
$r->gotoUrl('https://'.$host.$u->url(array("action"=>$action, "controller"=>$controller, "module"=>$module)))->redirectAndExit();
}
}
else
{
if($protocol == "https://")
{
$r->gotoUrl('http://'.$host.$u->url(array("action"=>$action, "controller"=>$controller, "module"=>$module)))->redirectAndExit();
}
}
}
}
}
After correction the code is:
更正后的代码是：
<?php
class Custom_Customplugins extends Zend_Controller_Plugin_Abstract
{
public function preDispatch(Zend_Controller_Request_Abstract $request)
{
$action = $request->getActionName();
$controller = $request->getControllerName();
$module = $request->getModuleName();
$protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) ? "https://" : "http://";
$host = $_SERVER['HTTP_HOST'];
if($host != "www.xyz.com")
{
if($protocol == "http://")
{
}
}
else
{
$r = new Zend_Controller_Action_Helper_Redirector();
$u = new Zend_Controller_Action_Helper_Url();
if(
($action == "index" && $controller == "index" && $module == "default")
|| ($action == "login" && $controller == "index" && $module == "default")
|| ($action == "businessownerregistration" && $controller == "index" && $module == "default")
|| ($action == "customerregistration" && $controller == "index" && $module == "default")
|| ($action == "index" && $controller == "changepwd" && $module == "admin")
|| ($action == "index" && $controller == "businessowner" && $module == "businessowner")
|| ($action == "changepwd" && $controller == "serviceprovider" && $module == "businessowner")
|| ($action == "index" && $controller == "customer" && $module == "default")
)
{
if($protocol == "http://")
{
$r->gotoUrl('https://'.$host.$u->url(array("action"=>$action, "controller"=>$controller, "module"=>$module)))->redirectAndExit();
}
}
else if(
($action == "autocomplete" && $controller == "ajax" && $module == "default")
|| ($action == "refreshcaptcha" && $controller == "index" && $module == "default")
)
{
}
else
{
if($protocol == "https://")
{
$r->gotoUrl('http://'.$host.$u->url(array("action"=>$action, "controller"=>$controller, "module"=>$module)))->redirectAndExit();
}
}
}
}
}
?>
and now, my https page is working fine
现在，我的 https 页面工作正常
