1311165 - "The callback URI uses an illegal protocol: http. Only http and https are allowed." during BMO auth delegation

Status: RESOLVED DUPLICATE of bug 1312735

(MozReview Graveyard :: Testing / Development Environment, defect)

Description

[David Walsh :davidwalsh]

I tried reviewing glob's inline comment patch but received the following error after logging into Bugzilla:

The callback URI uses an illegal protocol: http. Only http and https are allowed.

I log into Bugzilla successfully but am not redirect back to MozReview.

Comment 1

[David Walsh :davidwalsh]

Attachment: wut.png

Screenshot of error.

Comment 2

[:glob ✱]

the error message is misleading - bug 1310747 changed it so only https is allowed.
unfortunately we don't have https in our environment (bug 1291720).

options:
- pin to an older bmo version
- patch out this check in bmo
- ask for a bmo update to allow http connections to private addresses
- ask for a bmo update to add a param disable this check
- switch to https

dylan: thoughts?  i'd prefer not to have to pin or patch bmo.

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/hgcustom/version-control-tools/rev/b48bb0a037aa
testing: pin BMO commit to work around environment bustage

Comment 4

[:glob ✱]

i've pushed a temporary bmo pin until we can figure out the right way to address this.

Comment 5

[:glob ✱]

(In reply to Byron Jones ‹:glob› from comment #2)
> - ask for a bmo update to allow http connections to private addresses

fwiw this is my preferred fix (and might be useful to all bugzilla developers).
the ideal fix is switching our dev env to https, but that isn't a quick fix :(

Comment 6

[Dylan Hardison [:dylan] (he/him)]

(In reply to Byron Jones ‹:glob› from comment #5)
> (In reply to Byron Jones ‹:glob› from comment #2)
> > - ask for a bmo update to allow http connections to private addresses
> 
> fwiw this is my preferred fix (and might be useful to all bugzilla
> developers).
> the ideal fix is switching our dev env to https, but that isn't a quick fix
> :(

Sorry for the bustage. That is fine, and we can rollback bug 1310747.