Github auth now working too


#1

and thats a clusterfuck - i had expected https://discourse.g-com.eu/auth/github/callback, but it really is http://discourse.g-com.eu/auth/github/callback


#2

Ok - the clusterfuck was self made - discourse run in a container with apache as http2 proxy - and that has several consequences:

  • if only the front is https and the proxy is http some contents will contain insecure content
  • if the container is http the auth has to be http too
  • if one force https at some point one has to revoke the oauth and use https for the auth link too

Lesson learned :smiley: