Skip to content

Docs: Change /token request to use HTTPS

Jeff Crow requested to merge jeffcrow-token-https into master

What does this MR do?

I am working on a project that uses this Oauth2 web application flow. In my own development and testing, I have found that if I try the /oauth/token request via HTTP like the example shows, that it returns the "Checking your browser" page HTML markup every time. However, if I try the same request over HTTPS, it returns the expected payload with the access token.

Note I am not an engineer and not well versed in Oauth, this is just something that absolutely didn't work until I tried HTTPS and then worked as expected. It might be a good idea to have an engineer with an understanding of Oauth verify this.

Related issues

Author's checklist (required)

Do not add the feature, frontend, backend, ~"bug", or database labels if you are only updating documentation. These labels will cause the MR to be added to code verification QA issues.

When applicable:

Review checklist

All reviewers can help ensure accuracy, clarity, completeness, and adherence to the Documentation Guidelines and Style Guide.

1. Primary Reviewer

  • Review by a code reviewer or other selected colleague to confirm accuracy, clarity, and completeness. This can be skipped for minor fixes without substantive content changes.

2. Technical Writer

  • Technical writer review. If not requested for this MR, must be scheduled post-merge. To request for this MR, assign the writer listed for the applicable DevOps stage.

3. Maintainer

  1. Review by assigned maintainer, who can always request/require the above reviews. Maintainer's review can occur before or after a technical writer review.
  2. Ensure a release milestone is set.
  3. If there has not been a technical writer review, create an issue for one using the Doc Review template.
Edited by Mike Jang

Merge request reports