authentication - Accessing files on dropbox with client-side Javascript from http only -
i'm trying add dropbox support client-side-only javascript app (http://bbc.godbolt.org/). best can tell can't authenticate without site being hosted on secure server.
for variety of reasons it's tricky me https server set up, , i'm not using server endpoints don't see why dropbox/oauth mandates https:// source url.
i can't find reference limitation, can't configure non-https server in dropbox configuration app; , without specifying endpoint client-side authentication fails.
am missing something?
thanks!
https required oauth 2 spec reason... access token returned @ end of authorization process in plain text , stolen if not sent on secure channel.
Comments
Post a Comment