New issue

Jump to bottom

Unsafe check for req.connection.encrypted in utils.js #15

Open

Shubachi opened this issue Aug 17, 2016 · 1 comment

Shubachi commented Aug 17, 2016

https://github.com/jaredhanson/passport-http-oauth/blob/master/lib/passport-http-oauth/strategies/utils.js#L25

In particular, in koa, req.connection.encrypted defaults to 'keep-alive'

Owner

jaredhanson commented Aug 17, 2016

That sounds like a problem with koa.

# for free to join this conversation on GitHub. Already have an account? # to comment