search

C4illin / ConvertX

💾 Self-hosted online file converter. Supports 700+ formats
GNU Affero General Public License v3.0
99 stars 3 forks source link

Impossible to login without HTTPS #9

Closed zarevskaya closed 2 months ago

zarevskaya commented 2 months ago

Hello :)

I linked a domain to your application and it works. But if I want to use it locally with the ip:port, I can't connect.

Is this a desire on your part? Or it's possible to use it in local without HTTPS?

Have a nice day!

C4illin commented 2 months ago

Hello!

It is not desired, but untested.

I tested it now and I can go to the page but not log in. The auth token is set to secure so will add a environment variable to fix it.

zarevskaya commented 2 months ago

Same observation as me. :)

Thanks for the answer.

C4illin commented 2 months ago

set the env. var. HTTP_ALLOWED to true and it will work. That does leave you vurnable to a man in the middle attack.

zarevskaya commented 2 months ago

I am well aware of it, but it was mainly to understand. Thank you very much.

C4illin commented 2 months ago

Thank you for reporting it

zarevskaya commented 2 months ago

With pleasure! I'm publishing the article tonight at midnight.

Thanks for all ;)