@Override
    protected boolean isAccessAllowed(ServletRequest request, ServletResponse response, Object mappedValue) throws Exception {
        return super.isAccessAllowed(request, response, mappedValue) && request.isSecure();
    }
Retains the parent method's port-matching behavior but additionally guarantees that the
{@code ServletRequest.}{@link javax.servlet.ServletRequest#isSecure() isSecure()}.  If the port does not match or
the request is not secure, access is denied.

@param request     the incoming {@code ServletRequest}
@param response    the outgoing {@code ServletResponse} - ignored in this implementation
@param mappedValue the filter-specific config value mapped to this filter in the URL rules mappings
                   - ignored by this implementation.
@return {@code true} if the request is received on an expected SSL port and the
{@code request.}{@link javax.servlet.ServletRequest#isSecure() isSecure()}, {@code false} otherwise.
@throws Exception if the call to {@code super.isAccessAllowed} throws an exception.
@since 1.2
web/src/main/java/org/apache/shiro/web/filter/authz/SslFilter.java