v3: use HTTPS in production

aquariumbio / aquarium

The Aquarium Lab Operating System

http://klavinslab.org/aquaverse/

MIT License

58 stars 15 forks source link

v3: use HTTPS in production #490

Closed gnomicosuw closed 3 years ago

gnomicosuw commented 3 years ago

If nothing else at least for the RoR app / API backend calls.

At minimum the signin API call needs to be over HTTPS (and any other pages where the user submits their password). Ideally the whole site should be so that the token is passed securely as well.

gnomicosuw commented 3 years ago

closed. instructions for HTTPS already in the documentation https://github.com/aquariumbio/aquarium-multiple-deployment