[SOLVED] Unsecure callback sent to OAuth provider due to reverse proxy
- 0
- Resolved
- Flutter
- Accounts
Hey, I'm running Appwrite and my Flutter web app (running live for debugging using flutter run) behind an NGINX reverse proxy and it seems that due to the reverse proxy handling the HTTPS traffic and decrypting it for the apps, when I try to sign in using createOAuth2Session, it passes an unsecured callback URL to the provider, meaning I cannot continue signing in. This is probably the same issue as https://github.com/appwrite/appwrite/issues/5545 but I didn't find any solution there. Is there anything I can do to force it to pass HTTPS?
If you use default https port I think it will use https
As suggested in the issue: https://github.com/appwrite/appwrite/issues/5545#issuecomment-1553276914
I didn't really understand what proxying to Appwrite using HTTPS meant
Your proxy_pass directive should include https
Oh ok, am I supposed to change some setting related to HTTPS in appwrite, because now every page returns 404 page not found
Found only something about _APP_OPTIONS_FORCE_HTTPS, but it says it only works when the app is using 80 and 443 ports, which I am not
No nothing in Appwrite. What ports is Appwrite running on? What exactly is your proxy pass directive?
Yeah I'm just stupid, I forgot to switch the port to the https port when I was changing http to https in the proxy_pass 🤦♂️
Ok yeah it all works now, thank you very much 🙏
[SOLVED] Unsecure callback sent to OAuth provider due to reverse proxy
Recommended threads
- How to disable appwrite/embedding from s...
Hi everyone! I'm currently running a self-hosted instance of Appwrite. For my current use case, I don't need the AI/embedding features, and I noticed the `app...
- Active Running Project Deletion Alert Em...
Hi , I received an email alert from Appwrite today stating “your project will be deleted within 14 days if no action is taken,” though I have been actively usin...
- How to use dart workspaces to deploy a f...
Hello, I'm developing a Flutter application and I would like to leverage dart pub workspaces to deploy a function with a dart runtime as advertised here : http...