Always HTTPS change POST to GET

Users making a POST request to an http:// URL are being redirected correctly to https://, but the request method is being changed to GET.

We follow the Cloudflare help article indicating the best configuration for APIs (https://support.cloudflare.com/hc/en-us/articles/200504045-Using-Cloudflare-with-your-API).

Is there anything else that should be done to use Always HTTP and not change the type of request?

That feature is implemented via a 302 status code which simply issues a new HTTP request, which defaults to GET. The somewhat new 307 would preserve the original request state, however that feature is not using that at this point (you could open a feature request).

For now it probably is best to keep your entire site on HTTPS before it even gets to a POST. If that is the case people should never post anything to an HTTP URL in the first place.

1 Like

This topic was automatically closed after 30 days. New replies are no longer allowed.