mike-goodwin / owasp-threat-dragon

An open source, online threat modelling tool from OWASP
http://mike-goodwin.github.io/owasp-threat-dragon/
Apache License 2.0
483 stars 130 forks source link

github authentication is not working on localhost #73

Closed anirbanctts closed 6 years ago

anirbanctts commented 6 years ago

I have just cloned the master repo and setup the oauth in my git account as per given steps, Also i have setup env, client_id, client_secret etc as env variable. Have setup SESSION_STORE as local in env variable. Now when i click the login it is redirecting me to git authentication login page but post authentication i am again getting redirected back to login page of this application. Have tried setup the Authorization callback URL as 'http://localhost:3000', 'http://localhost:3000/new/threatmodel' and 'http://localhost:3000/#/' but none of the 3 is taking me to logged in page. Though i am getting redirected back to the login page but the login action doesn't do any thing post redirection from github. Once i close the browser instance and then relaunch the browser then only the login action take me to authentication page of github but after login attempt same process repeats.

anirbanctts commented 6 years ago

Figure this out. Callback URL was the problem, OAuth/Github was url meant to be. However there was encryption issue that started coming, opened a new issue and closing this one