search

ideaaward / badge-builder

Other
2 stars 2 forks source link

Sometimes landing to a page saying "Authentication failure." #127

Open vjrantal opened 8 years ago

vjrantal commented 8 years ago

This happens if your session to the Badge Builder site is expired and you enter the site via HTTP URL (instead of HTTPS).

The reason is that we set cookies to be secured and thus not stored when site accesses insecurely. This creates the malfunction during the authentication flow.

The fix would be to allow entering the site only via the HTTPS URL by redirecting properly when accessed insecurely.