{"action":"created","issue":{"url":"https://api.github.com/repos/octobercms/october/issues/856","labels_url":"https://api.github.com/repos/octobercms/october/issues/856/labels{/name}","comments_url":"https://api.github.com/repos/octobercms/october/issues/856/comments","events_url":"https://api.github.com/repos/octobercms/october/issues/856/events","html_url":"https://github.com/octobercms/october/issues/856","id":53247664,"number":856,"title":"Backend Breaks With SSL","user":{"login":"flip4bytes","id":5505994,"avatar_url":"https://avatars.githubusercontent.com/u/5505994?v=3","gravatar_id":"","url":"https://api.github.com/users/flip4bytes","html_url":"https://github.com/flip4bytes","followers_url":"https://api.github.com/users/flip4bytes/followers","following_url":"https://api.github.com/users/flip4bytes/following{/other_user}","gists_url":"https://api.github.com/users/flip4bytes/gists{/gist_id}","starred_url":"https://api.github.com/users/flip4bytes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/flip4bytes/subscriptions","organizations_url":"https://api.github.com/users/flip4bytes/orgs","repos_url":"https://api.github.com/users/flip4bytes/repos","events_url":"https://api.github.com/users/flip4bytes/events{/privacy}","received_events_url":"https://api.github.com/users/flip4bytes/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/octobercms/october/labels/conceptual+feature+request","name":"conceptual feature request","color":"bfe5bf"},{"url":"https://api.github.com/repos/octobercms/october/labels/unconfirmed+bug","name":"unconfirmed bug","color":"f7c6c7"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-01-02T11:14:21Z","updated_at":"2015-01-11T01:48:03Z","closed_at":null,"body":"I've been looking for support and a way to fix this for a few days now with no avail.\r\n\r\nThe assets that are being called when you visit /backend are all called in via http://\r\n\r\nThis causes it to be broken as the browser won't load insecure assets over https://\r\n\r\nThe fix I did in Laravel does not work in OctoberCMS and making any forcing changes within the backend files just cause it to reset anyway when you run composer (of which happens every time you push your updated site to Heroku).\r\n\r\nHowcome it even lists the complete directory by default on October anyway? Rather than listing \"http://example.com/modules/foo/bar/.css&.js\" why not have it by default just be \"/modules/foo/bar/.css&.js\" and then you wouldn't even have to deal with the native assets switching between http:// and https://."},"comment":{"url":"https://api.github.com/repos/octobercms/october/issues/comments/69480157","html_url":"https://github.com/octobercms/october/issues/856#issuecomment-69480157","issue_url":"https://api.github.com/repos/octobercms/october/issues/856","id":69480157,"user":{"login":"flip4bytes","id":5505994,"avatar_url":"https://avatars.githubusercontent.com/u/5505994?v=3","gravatar_id":"","url":"https://api.github.com/users/flip4bytes","html_url":"https://github.com/flip4bytes","followers_url":"https://api.github.com/users/flip4bytes/followers","following_url":"https://api.github.com/users/flip4bytes/following{/other_user}","gists_url":"https://api.github.com/users/flip4bytes/gists{/gist_id}","starred_url":"https://api.github.com/users/flip4bytes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/flip4bytes/subscriptions","organizations_url":"https://api.github.com/users/flip4bytes/orgs","repos_url":"https://api.github.com/users/flip4bytes/repos","events_url":"https://api.github.com/users/flip4bytes/events{/privacy}","received_events_url":"https://api.github.com/users/flip4bytes/received_events","type":"User","site_admin":false},"created_at":"2015-01-11T01:48:03Z","updated_at":"2015-01-11T01:48:03Z","body":"Yeah, I just logged out of the backend and can't even log back into my site unless I go to CloudFlare, disable SSL, visit my site in http:// and then login that way before finally turning back on https:// and accepting the browser to load unsafe assets.\r\n\r\nTrue SSL is pretty much useless until the backend assets are called in relative which is becoming more and more important now that SSL even on generic sites is highly recommended by Google.\r\n\r\nLooking to use OctoberCMS on my client's site that's coming up in a couple weeks so really hope it gets settled by then.\r\n\r\nCheers!"}}