mirror of
https://github.com/hoppscotch/hoppscotch.git
synced 2026-04-25 16:55:59 +03:00
[GH-ISSUE #3238] [bug]: OAuth does not work with HTTPS #1074
Labels
No labels
CodeDay
a11y
browser limited
bug
bug fix
cli
core
critical
design
desktop
discussion
docker
documentation
duplicate
enterprise
feature
feature
fosshack
future
good first issue
hacktoberfest
help wanted
i18n
invalid
major
minor
need information
need testing
not applicable to hoppscotch
not reproducible
pull-request
question
refactor
resolved
sandbox
self-host
spam
stale
testmu
wip
wont fix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/hoppscotch#1074
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @AhmedmmAli on GitHub (Aug 4, 2023).
Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/3238
Is there an existing issue for this?
Current behavior
I have installed hoppscotch self-hosted and deployed on a VM behind a proxy and when I'm trying to login with MS or GitHub or any OAuth, it keep failing and return unauthorized 401
.env example
`
#Microsoft Auth Config
MICROSOFT_CLIENT_ID=""
MICROSOFT_CLIENT_SECRET=""
MICROSOFT_CALLBACK_URL="https://hoppscotch-backend.example.net/v1/auth/microsoft/callback"
MICROSOFT_SCOPE="user.read"
MICROSOFT_TENANT="************"
#Base URLs
VITE_BASE_URL=https://hoppscotch.example.net/
VITE_SHORTCODE_BASE_URL=https://hoppscotch.example.net/
VITE_ADMIN_URL=https://hoppscotch-admin.example.net/
#Backend URLs
VITE_BACKEND_GQL_URL=https://hoppscotch-backend.example.net/graphql
VITE_BACKEND_WS_URL=ws://hoppscotch-backend.example.net/graphql
VITE_BACKEND_API_URL=https://hoppscotch-backend.example.net/v1
`
Steps to reproduce
1- Install hoposcotch behind a revers proxy with SSL applied
Environment
Production
Version
Self-hosted
@liyasthomas commented on GitHub (Aug 5, 2023):
Hi @AhmedmmAli, to better understand the issue, can you answer the following?
.envfile, you should mask all sensitive environment variables (eg.CLIENT_SECRET).