Take the 2-minute tour ×
Stack Apps is a question and answer site for apps, scripts, and development with the Stack Exchange API. It's 100% free, no registration required.

I had a bug reported to me that I was able to reproduce. When authorizing to my Badges webapp, we get the following error:

error: invalid_request
error description: OAuth request must be over HTTPS

However, I checked and the request URL is:

https://stackexchange.com/oauth/dialog?client_id=74&redirect_uri=http://agent86ix.github.io/stackapps/badge/

...which appears to be using https:// as required.

I haven't touched the app in months, so unless something has changed and I'm oblivious, I'm not sure how it could be my bug. Could someone take a look and give some guidance?

share|improve this question
    
Even the API documentation fails with the same error, so it must be an internal problem. –  Tim Stone Oct 27 '13 at 16:57
add comment

1 Answer

up vote 3 down vote accepted

We moved from nginx to HAProxy for our SSL provider this weekend as part of a larger rollout. In the move, we shifted our header checks to the now de-facto standard SSL protocol header. While I thought I fixed all the apps relying on the old header and standardized everything internally, stackexchange.com was left out and thought your auth requests weren't over SSL anymore.

I just deployed a se.com build that resolves this, requests should now be working correctly.

share|improve this answer
add comment

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .