title: web3 HTTP access is forbidden error when unlocking account over HTTPS
body: <p>I am building an <strong>Express Application</strong> that tries to deploy a Smart Contract in a <strong>Quorum</strong> Blockchain running in <strong>Openshift</strong>.</p>
  <p>When I run the Application it tries to unlock an account to deploy the contract with.</p>
  <p>At this step I get the following error:</p>
  <pre><code># UNLOCKED FAILED.
  Error: Returned error: account unlock with HTTP access is forbidden
  [0]     at Object.ErrorResponse (/.../my-project/node_modules/web3-core-helpers/src/errors.js:29:16)
  [0]     at /.../my-project/node_modules/web3-core-requestmanager/src/index.js:140:36
  [0]     at XMLHttpRequest.request.onreadystatechange (/.../my-project/node_modules/web3-providers-http/src/index.js:96:13)
  [0]     at XMLHttpRequestEventTarget.dispatchEvent (/.../my-project/node_modules/xhr2-cookies/dist/xml-http-request-event-target.js:34:22)
  [0]     at XMLHttpRequest._setReadyState (/.../my-project/node_modules/xhr2-cookies/dist/xml-http-request.js:208:14)
  [0]     at XMLHttpRequest._onHttpResponseEnd (/.../my-project/node_modules/xhr2-cookies/dist/xml-http-request.js:318:14)
  [0]     at IncomingMessage.&lt;anonymous&gt; (/.../my-project/node_modules/xhr2-cookies/dist/xml-http-request.js:289:61)
  [0]     at IncomingMessage.emit (events.js:327:22)
  [0]     at endReadableNT (_stream_readable.js:1224:12)
  [0]     at processTicksAndRejections (internal/process/task_queues.js:84:21)
  </code></pre>
  <p>However, the endpoint of my Quorum node is <strong>https</strong>.</p>
  <p>Here is the code causing the error:</p>
  <pre><code>const web3 = new Web3(HTTPS_QUORUM_ENDPOINT);
  
  const account = (await web3.eth.getAccounts())[0];
  
  await web3.eth.personal
        .unlockAccount(account, ACCOUNT_PASSWORD)
        .then((response) =&gt; {
          console.log(&quot;# UNLOCKED. OKAY.&quot;);
        })
        .catch((error) =&gt; {
          console.log(&quot;# UNLOCKED FAILED.&quot;);
          console.error(error);
        });
  </code></pre>
  <p>Am I doing something wrong? Can it be that the openshift gateway to the Quorum pod is not secured, even though the Route is?</p>