Stack Apps is a question and answer site for apps, scripts, and development with the Stack Exchange API. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I had a bug reported to me that I was able to reproduce. When authorizing to my Badges webapp, we get the following error:

error: invalid_request
error description: OAuth request must be over HTTPS

However, I checked and the request URL is:

...which appears to be using https:// as required.

I haven't touched the app in months, so unless something has changed and I'm oblivious, I'm not sure how it could be my bug. Could someone take a look and give some guidance?

share|improve this question
Even the API documentation fails with the same error, so it must be an internal problem. – Tim Stone Oct 27 '13 at 16:57
up vote 3 down vote accepted

We moved from nginx to HAProxy for our SSL provider this weekend as part of a larger rollout. In the move, we shifted our header checks to the now de-facto standard SSL protocol header. While I thought I fixed all the apps relying on the old header and standardized everything internally, was left out and thought your auth requests weren't over SSL anymore.

I just deployed a build that resolves this, requests should now be working correctly.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .