Why can I use HTTP with localhost and not with another URL
I am using the Box API with Mulesoft to connect to get files. I have created a new app and locally everything is fine. I use http://localhost:8081/callback as Redirect URI value.
However, when I deploy the application to Cloudhub (Public URL) and I authorize the app, it returns an error
That's because I am using HTTP instead of HTTPS, however if I use localhost it works.
The same problem configuring the Redirect URI in my Box App:
What could be the problem?
-
thank you for raising your issue.
Box Platform supports regular insecure http for development and testing on localhost/127.0.0.1. For any other environment we require https as it ensures the authorization code can not be intercepted in transit. This is part of the OAuth 2.0 specification.
To use CloudHub with Box Platform I recommend setting up an SSL certificate with them if possible. I am not too familiar with their service, but if they do not offer this themselves I'd recommend looking at a free SSL certificate through LetsEncrypt.
Please sign in to leave a comment.
Comments
1 comment