Qlik Sense can be configured to allow both HTTP and HTTPS traffic. In some scenarios, an administrator prefers to only enable HTTPS traffic and redirect users who attempt to access Qlik Sense by HTTP to HTTPS.
Most web servers like IIS, Apache, or nginx set up as reverse proxies in front of Qlik Sense can accomplish a redirect from HTTP to HTTPS. Accomplishing the redirect from HTTP to HTTPS is the preferred method. The code below is provided as is, and is not guaranteed to continue working in case Qlik upgrades the node.js version used in the Qlik Sense base product.
It is recommended to use whichever product the organization has institutional knowledge about since support will need to be provided from those resources.
For demonstration purposes in the Qlik Sense product, the administrator can use a custom NodeJS module which is launched by Qlik Sense to accomplish this task.
! Qlik Support's scope does not include the debugging or writing of custom code for customers. For assistance on custom solutions, please contact our consulting services/professional services, or engage with our active community of partners and customers. The supplied example code is provided for demonstration purposes. No Support or maintenance is implied or provided. Further customization is expected to be necessary and it is the responsibility of the end administrator to test and implement an appropriate rule for their specific use case.
! Redirecting from HTTP to HTTPS does not automatically guarantee or equal HSTS compliance. For details on HSTS compliance, see HTTP Strict Transport Security (HSTS) in Qlik Sense.
! Changes made to the configuration files will be reverted back to default upon product upgrade.
Resolution:
1. Create a folder named route2https in C:\Program Files\Qlik\Sense\ServiceDispatcher\Node\
2. Create server.js file in the route2https folder, paste this code in to it and save:
// Redirect from http port 80 to https
var http = require('http');
http.createServer(function (req, res) {
res.writeHead(301, { "Location": "https://" + req.headers['host'] + req.url });
res.end();
}).listen(80);
3. Edit C:\Program Files\Qlik\Sense\ServiceDispatcher\services.conf file and paste the following code into it at the end:
[httproute]
Identity=Qlik.httproute
Enabled=true
DisplayName=httproute
ExecType=nodejs
ExePath=Node\node.exe
Script=Node\route2https\server.js
4. Restart the Qlik Sense Service Dispatcher service
These steps need to be carried out on each Proxy node that is expected to redirect from HTTP to HTTPS.
* Courtesy of Nick Akincilar in Qlik Pre-Sales.
For an additional example see the Qlik Community: Qlik Sense redirect HTTP to HTTPS
