{"action":"created","issue":{"url":"https://api.github.com/repos/fedwiki/wiki-security-passportjs/issues/4","repository_url":"https://api.github.com/repos/fedwiki/wiki-security-passportjs","labels_url":"https://api.github.com/repos/fedwiki/wiki-security-passportjs/issues/4/labels{/name}","comments_url":"https://api.github.com/repos/fedwiki/wiki-security-passportjs/issues/4/comments","events_url":"https://api.github.com/repos/fedwiki/wiki-security-passportjs/issues/4/events","html_url":"https://github.com/fedwiki/wiki-security-passportjs/issues/4","id":187546363,"number":4,"title":"SSL enabled wiki throws mixed content errors","user":{"login":"wohyah","id":45738,"avatar_url":"https://avatars.githubusercontent.com/u/45738?v=3","gravatar_id":"","url":"https://api.github.com/users/wohyah","html_url":"https://github.com/wohyah","followers_url":"https://api.github.com/users/wohyah/followers","following_url":"https://api.github.com/users/wohyah/following{/other_user}","gists_url":"https://api.github.com/users/wohyah/gists{/gist_id}","starred_url":"https://api.github.com/users/wohyah/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wohyah/subscriptions","organizations_url":"https://api.github.com/users/wohyah/orgs","repos_url":"https://api.github.com/users/wohyah/repos","events_url":"https://api.github.com/users/wohyah/events{/privacy}","received_events_url":"https://api.github.com/users/wohyah/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-11-06T07:10:10Z","updated_at":"2016-11-07T10:17:35Z","closed_at":null,"body":"As an author who would like to participate and link to other Federated Wikis\r\nI would like to take my SSL Wiki, and make links to articles on wikis without HTTPS\r\nSo that I can participate in a community\r\n\r\nI've configured an instance of Federated Wiki based on the [Passport instructions](https://github.com/fedwiki/wiki-security-passportjs) behind Caddy on [wiki.matthew.nz](https://wiki.matthew.nz).\r\n\r\nRunning this SSL enabled Wiki throws up mixed content errors and displays \"We could not find this page\" when trying to link to non SSL wiki sites such as http://sites.fed.wiki.org\r\n\r\nThis URL demonstrates the issue:\r\nhttps://wiki.matthew.nz/view/welcome-visitors/view/federated-wiki/view/sitesfedwikiorg\r\n\r\nI've gone over the instructions a few times but am not sure what I can do next.\r\n\r\nAm I doing something wrong?\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/fedwiki/wiki-security-passportjs/issues/comments/258797003","html_url":"https://github.com/fedwiki/wiki-security-passportjs/issues/4#issuecomment-258797003","issue_url":"https://api.github.com/repos/fedwiki/wiki-security-passportjs/issues/4","id":258797003,"user":{"login":"paul90","id":1552489,"avatar_url":"https://avatars.githubusercontent.com/u/1552489?v=3","gravatar_id":"","url":"https://api.github.com/users/paul90","html_url":"https://github.com/paul90","followers_url":"https://api.github.com/users/paul90/followers","following_url":"https://api.github.com/users/paul90/following{/other_user}","gists_url":"https://api.github.com/users/paul90/gists{/gist_id}","starred_url":"https://api.github.com/users/paul90/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/paul90/subscriptions","organizations_url":"https://api.github.com/users/paul90/orgs","repos_url":"https://api.github.com/users/paul90/repos","events_url":"https://api.github.com/users/paul90/events{/privacy}","received_events_url":"https://api.github.com/users/paul90/received_events","type":"User","site_admin":false},"created_at":"2016-11-07T10:17:35Z","updated_at":"2016-11-07T10:17:35Z","body":"How the auth is done is governed by the OAuth identity provider, and will always be over TLS. All the parameter does is determine if the sub-window that the user selects which OAuth provider to use, and the final callback, is to use TLS. Some OAuth providers, such as Salesforce.com, insist that the final callback uses TLS, while some only recommend it or are quiet on the matter.\r\n\r\nPersonally I would like to see all servers providing their content over both http and https, but that is not where we currently are.\r\n\r\nWe have making the client protocol agnostic high on the list, though the current priority is getting past the Mozilla Persona close at the end of this month. \r\n\r\nWhile making the client protocol agnostic should remove the mixed content errors, it will make any sites in the federation that are still to support TLS invisible to those connecting to their origin server using https."}}
{"actor":{"display_login":"paul90"}}