summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorValery Sizov <valery@gitlab.com>2015-01-22 18:39:05 -0800
committerDmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>2015-01-22 19:01:05 -0800
commit98423148c5cf6de759cba74a78ade7b7c1da81ed (patch)
tree40b7d176066ed2b83643ad1d5ba07278dadb131c
parent4e7de9492fcc73f3c9db013a382bd3785ab9fd38 (diff)
downloadgitlab-ce-98423148c5cf6de759cba74a78ade7b7c1da81ed.tar.gz
allow to use http in redirect url
-rw-r--r--config/initializers/doorkeeper.rb6
1 files changed, 6 insertions, 0 deletions
diff --git a/config/initializers/doorkeeper.rb b/config/initializers/doorkeeper.rb
index 23d9852725b..4819ab273dc 100644
--- a/config/initializers/doorkeeper.rb
+++ b/config/initializers/doorkeeper.rb
@@ -36,6 +36,12 @@ Doorkeeper.configure do
# Issue access tokens with refresh token (disabled by default)
use_refresh_token
+ # Forces the usage of the HTTPS protocol in non-native redirect uris (enabled
+ # by default in non-development environments). OAuth2 delegates security in
+ # communication to the HTTPS protocol so it is wise to keep this enabled.
+ #
+ force_ssl_in_redirect_uri false
+
# Provide support for an owner to be assigned to each registered application (disabled by default)
# Optional parameter :confirmation => true (default false) if you want to enforce ownership of
# a registered application