Issue
- When authorizing from analytics, observed an error which seems like the 'HTTPS' request is getting converted to 'HTTP'.
Environment
- Liferay 7.2
Resolution
-
The browser never makes a request, it's AC which makes a request to the server in order to pull data. Therefore, in order for the server to work with 'HTTPS' on AC, it will need a valid cert and not a self-signed cert.
-
There is nothing fundamentally different interacting with 'HTTP' vs 'HTTPS' servers.
Additional Information
- A basic rundown of how the interaction between AC and DXP goes like this
- AC sends a request to DXP to create a token
- AC redirects the user to DXP instance for them to authorize
- DXP authorizes request after a user clicks authorize
- DXP redirects back to AC
- AC uses a token to make API calls
- Liferay 7.2 dxp-5, able to use token authentication. With token authentication, all the data is pushed from the DXP to AC so this wouldn't be a problem anymore. The OAuth connection method relies on pulling data from DXP to AC.