search

mastodon / mastodon-bridge

Moved to https://source.joinmastodon.org/mastodon/bridge
https://bridge.joinmastodon.org
63 stars 11 forks source link

HTTPS breaks callback #3

Open ineffyble opened 7 years ago

ineffyble commented 7 years ago

If you access it on https, which works, the callback URI it provides is invalid.

gdurelle commented 7 years ago

Well for me it the reverse :D Works with https, not http. Would be better to add HSTS on the server and keep everything HTTPS

fhemberger commented 7 years ago

@Gargron Would it be enough to switch on config.force_ssl = true in production to make the bridge HTTPS only and fix this issue?