[GH-ISSUE #1009] postwoman google login doesn't work behind ingress or reverse proxy #350

New issue

Closed

opened 2026-03-16 14:51:01 +03:00 by kerem · 2 comments

kerem commented

2026-03-16 14:51:01 +03:00

Owner

Originally created by @ghost on GitHub (Jul 21, 2020).
Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/1009

Describe the bug
Google login doesn't work when you deploy postwoman behind reverse proxy or ingress

To Reproduce
Steps to reproduce the behavior:
Easiest way to reproduce is run below docker-compose and login to google by http://localhost:80 (reverse_proxy) instead of http://localhost:3000 (postwoman direct)

https://gist.github.com/javad-hajiani/c604f42e3fc0068ae65b482a3adf8278

Expected behavior
google login work properly like what you have already without reverse_proxy

Desktop (please complete the following information):

OS: ubuntu 18.04
Browser chromium
Version 83

Originally created by @ghost on GitHub (Jul 21, 2020). Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/1009 **Describe the bug** Google login doesn't work when you deploy postwoman behind reverse proxy or ingress **To Reproduce** Steps to reproduce the behavior: Easiest way to reproduce is run below docker-compose and login to google by http://localhost:80 (reverse_proxy) instead of http://localhost:3000 (postwoman direct) https://gist.github.com/javad-hajiani/c604f42e3fc0068ae65b482a3adf8278 **Expected behavior** google login work properly like what you have already without reverse_proxy **Desktop (please complete the following information):** - OS: ubuntu 18.04 - Browser chromium - Version 83

kerem closed this issue

2026-03-16 14:51:06 +03:00

kerem commented

2026-03-16 14:51:12 +03:00

Author

Owner

@liyasthomas commented on GitHub (Jul 21, 2020):

Login is disabled for all request URLs except postwoman.io due to security concerns. Kindly use postwoman.io to make use of sync feature.

Duplicate of #817

@liyasthomas commented on GitHub (Jul 21, 2020): Login is disabled for all request URLs except `postwoman.io` due to security concerns. Kindly use [postwoman.io](https://postwoman.io) to make use of sync feature. Duplicate of #817

kerem commented

2026-03-16 14:51:17 +03:00

Author

Owner

@schndr commented on GitHub (Jul 21, 2020):

@liyasthomas Can you please elaborate the security concerns in detail?

@schndr commented on GitHub (Jul 21, 2020): @liyasthomas Can you please elaborate the security concerns in detail?

kerem referenced this issue

2026-03-17 00:15:56 +03:00

[PR #350] [MERGED] Undo header/param/body param deletion #2574