and thats a clusterfuck - i had expected https://discourse.g-com.eu/auth/github/callback, but it really is http://discourse.g-com.eu/auth/github/callback
Github auth now working too
agaida
#1
agaida
#2
Ok - the clusterfuck was self made - discourse run in a container with apache as http2 proxy - and that has several consequences:
- if only the front is https and the proxy is http some contents will contain insecure content
- if the container is http the auth has to be http too
- if one force https at some point one has to revoke the oauth and use https for the auth link too
Lesson learned 