02:36 <isd> abliss: re: authorization header, the best reference for what gets filtered is web-session.capnp

02:37 <isd> In this case, the reason is basically just that sandstorm expects to handle auth for apps.

02:38 <isd> I assume this is related to trying to get riot working?

02:38 <abliss> thanks, I see that it "will not be added ever" because "sandstorm handles authentication"

02:38 <abliss> yeah, it would mean less digging in the app if i could just let the frontend send what it wanted to the backend. but i'd probaly end up needing to do the digging eventually anyway.

03:18 <abliss> what's the trick TTRSS does to get unfettered network access? i'd like to try using it to tunnel my debugger into the grain while it's running.

03:26 <abliss> oh, nvm, i see it. https://github.com/jparyani/Tiny-Tiny-RSS/blob/sandstorm/sandstorm/sandstorm-httpGet.c%2B%2B

11:54 <syf_z_otchlani> yeah, but if I remove HTTPS port all config is still assuming https..

11:54 <syf_z_otchlani> Fehler bei der Autorisierung

11:54 <syf_z_otchlani> Invalid parameter value for redirect_uri: .local URIs not allowed: https://tuleap.local/_oauth/google

11:54 <syf_z_otchlani> Fehler 400: invalid_request

13:00 <JacobWeisz[m]> There is a hack to import an HTTPS cert directly into Sandstorm, there's just not a UI for it quite yet. It should be available soon though.

13:02 <JacobWeisz[m]> What the current strategy is, is to use HTTP on Sandstorm, but with the https:// URLs in the config, and have the Nginx reverse proxy provide that HTTPS connection.