From bb7cca21efdef69cb72b38fa988ec769c0ccb05c Mon Sep 17 00:00:00 2001 From: jwijenbergh Date: Tue, 2 May 2023 11:12:14 +0200 Subject: OAuth: Always set the scheme to HTTPS for the authorization URL Useful if the cache is busted --- internal/oauth/oauth.go | 2 ++ 1 file changed, 2 insertions(+) (limited to 'internal') diff --git a/internal/oauth/oauth.go b/internal/oauth/oauth.go index f9bf164..cee6599 100644 --- a/internal/oauth/oauth.go +++ b/internal/oauth/oauth.go @@ -501,6 +501,8 @@ func (oauth *OAuth) AuthURL(name string, postProcessAuth func(string) string) (s if err != nil { return "", errors.WrapPrefix(err, fmt.Sprintf("failed to parse OAuth base URL '%s'", oauth.BaseAuthorizationURL), 0) } + // Make sure the scheme is HTTPS + p.Scheme = "https" u, err := httpw.ConstructURL(p, params) if err != nil { -- cgit v1.2.3