omab / python-social-auth

Social auth made simple
http://psa.matiasaguirre.net
BSD 3-Clause "New" or "Revised" License
2.83k stars 1.09k forks source link

Fix mixed-content error of loading http over https scheme after disconnection from social account #924

Closed kola-er closed 8 years ago

kola-er commented 8 years ago

The three possible sources of redirect-uri to backend.strategy.redirect() call would most likely supply a relative uri. From my encounter with this, the redirect-uri got loaded over http which caused Mixed-content error since the social platform disconnection request was made over https scheme.

So passing any of the relative redirect-uri to backend.strategy.absolute_uri() would pass the absolute redirect-uri with the desired scheme to backend.strategy.redirect().

omab commented 8 years ago

Thanks!