remotestorage / starter-kit

The quickest way to get started with a local remoteStorage server and a Hello World app as your starting point
92 stars 9 forks source link

remotestorage-browser not working with starter kit #22

Closed silverbucket closed 9 years ago

silverbucket commented 9 years ago

I was trying to browse the starter kit files with remotestorage-browser.5apps.com but it wasn't working. When I entered me@local.me:8001 into the widget it fails on webfinger lookup:

"try url" "https://local.me:8001/.well-known/webfinger?resource=acct%3Ame%40local.me%3A8001" remotestorage.js:225
"webfinger error" Arguments { 0: error, 2 more… } "(" "https://local.me:8001/.well-known/webfinger?resource=acct%3Ame%40local.me%3A8001" ")" remotestorage.js:1083

"try url" "https://local.me:8001/.well-known/host-meta.json?resource=acct%3Ame%40local.me%3A8001" remotestorage.js:225
"webfinger error" Arguments { 0: error, 2 more… } "(" "https://local.me:8001/.well-known/host-meta.json?resource=acct%3Ame%40local.me%3A8001" ")" remotestorage.js:1083

"try url" "http://local.me:8001/.well-known/webfinger?resource=acct%3Ame%40local.me%3A8001"
michielbdejong commented 9 years ago

you're not allowed to access http-hosted resources (like the starter-kit webfinger record) from https-hosted pages (like remotestorage-browser.5apps.com)

silverbucket commented 9 years ago

Are you referring to the webfinger spec? it's true HTTP fallback is disabled completely. (Not just from an HTTPS source -> HTTP source, but no HTTP calls ever). However I didn't think that was implemented in the remotestorage-browser rs library. Also, if you see the last line, it's an HTTP call.

michielbdejong commented 9 years ago

No, there will be a little shield icon to the left of the address bar, linking to https://support.mozilla.org/en-US/kb/how-does-content-isnt-secure-affect-my-safety?as=u&utm_source=inproduct

michielbdejong commented 9 years ago

Like this: https://support.cdn.mozilla.net/media/uploads/gallery/images/2014-03-25-07-10-44-1aa0ef.png

silverbucket commented 9 years ago

ah ok, thanks!