We recently changed ORDS to run in Standalone mode, instead of within Tomcat.
- ORDS version 23.2, APEX Version 21.2, DB Version 19c
- ORDS is running on Port 8080 but behind a Load Balancer
- SSL is being terminated at the load balancer
The below settings are set in ORDS settings.xml:
<entry key="security.externalSessionTrustedOrigins">https://example.com</entry>
<entry key="security.httpsHeaderCheck">X-Forwarded-Proto: https</entry>
You can navigate around APEX pages just fine over HTTPS. The problem occurs when generating a Callback URL to Authenticate against Active Directory. APEX is passing AD an HTTP URL.
Also, if you run the following from APEX Builder SQL Command, you get an HTTP URL.
select apex_authentication.get_callback_url from dual;