Trouble to make the Oauth2 Web App example working

[ihommani]

Hello,

I've got the following error when I try the snippet of code

oauthlib.oauth2.rfc6749.errors.InsecureTransportError
I got the redirection but returning to the callback throws this exception.

The exception is triggered by the line :
token = github.fetch_token(token_url, client_secret=client_secret, authorization_response=request.url)

Since I'm new to requests-oauth, I don't know if the blunder is coming from me or not. But I almost copy/paste the code and replaced all that have to be replaced.

Can anyone confirm the example is working ?

[ib-lundgren]

OAuth 2 is not secure without SSL which is why you get this error, you don't have SSL setup on your test server. Most people don't while testing and that is fine. You can disable this check in two ways

1. By setting the environment variable DEBUG

   $ export DEBUG=1
   $ python webapp_example.py

2. Equivalent to above you can set this in Python (if you have problems setting environment variables)

   Somewhere in webapp_example.py, before the app.run for example

   import os
   os.environ['DEBUG'] = '1'

Hope that helps :)

[ihommani]

Indeed. Thx.
I noticed I wasn't the only one to wonder about this kind of exception.
I made a pull request to complete the example and highlight this potential problem.

Thx again

[ihommani]

Although something weird happens.
If I run the code in the normal mode browser (chrome) I get an oauthlib.oauth2.rfc6749.errors.MissingTokenError. Triggered by the same line.
If I run the same code in the browser cofidential mode, I get my user Json i.e the code runs smoothly.

Any idea of what it can be ?

[ib-lundgren]

@ihommani thanks for the PR :)

Hrm, not quite sure whether it is on provider or client side or something weird cookie thing. Could you add

import logging
import sys
log = logging.getLogger('oauthlib')
log.addHandler(logging.StreamHandler(sys.stdout))
log.setLevel(logging.DEBUG)  

to the beginning of your code and see what debug output you get (if you use a real provider with confidential secrets make sure to remove them from output before posting).

[ihommani]

@ib-lundgren , everything is alright now.
I don't know what happened yesterday. Maybe something linked to the cache. I have no clue now the problem is gone.
But you've been very helpful.

See you.

[hellupline]

there is a regression of this issue
oauthlib change their debug ENV var from DEBUG to OAUTHLIB_INSECURE_TRANSPORT for this exception

I will create a PR to update the example