Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use an HTTP URL for authorization in code flow #347

Open
suzukieng opened this issue Jun 23, 2020 · 0 comments
Open

Use an HTTP URL for authorization in code flow #347

suzukieng opened this issue Jun 23, 2020 · 0 comments

Comments

@suzukieng
Copy link
Contributor

My client uses the authorization code flow, and has a requirement that the authorization URL be HTTP (no HTTPS/TLS). The communication is secured by other means (usually a middleware will redirect to HTTPS).

The redirect URI is a local URL schema (e.g. myapp://oauth2/code), the token URI is HTTPS.

I can't currently use the library because, it will complain that I must use TLS, even for the authorization URL.

Is there some way to opt-out of the HTTPS/SSL/TLS check for the authorization URI?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant