{"action":"created","issue":{"url":"https://api.github.com/repos/gitlabhq/gitlabhq/issues/8632","labels_url":"https://api.github.com/repos/gitlabhq/gitlabhq/issues/8632/labels{/name}","comments_url":"https://api.github.com/repos/gitlabhq/gitlabhq/issues/8632/comments","events_url":"https://api.github.com/repos/gitlabhq/gitlabhq/issues/8632/events","html_url":"https://github.com/gitlabhq/gitlabhq/issues/8632","id":55193718,"number":8632,"title":"Forced HTTPS validation on new \"System OAuth applications\"","user":{"login":"rahul286","id":4115,"avatar_url":"https://avatars.githubusercontent.com/u/4115?v=3","gravatar_id":"","url":"https://api.github.com/users/rahul286","html_url":"https://github.com/rahul286","followers_url":"https://api.github.com/users/rahul286/followers","following_url":"https://api.github.com/users/rahul286/following{/other_user}","gists_url":"https://api.github.com/users/rahul286/gists{/gist_id}","starred_url":"https://api.github.com/users/rahul286/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rahul286/subscriptions","organizations_url":"https://api.github.com/users/rahul286/orgs","repos_url":"https://api.github.com/users/rahul286/repos","events_url":"https://api.github.com/users/rahul286/events{/privacy}","received_events_url":"https://api.github.com/users/rahul286/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-01-22T18:59:00Z","updated_at":"2015-01-23T00:28:21Z","closed_at":null,"body":"I just upgraded to GitLab 7.7 and Gitlab CI to 5.4.\r\n\r\nThe new `OAuth applications` is forcing SSL requirement on URL. I think this validation is added in error and should be removed.\r\n\r\nPlease find attached screenshot below:\r\n\r\n![admin_area___gitlab](https://cloud.githubusercontent.com/assets/4115/5862298/b1968838-a296-11e4-8d2e-07692586b954.png)\r\n\r\nHTTPS is good but security should be optional. Going by above validation, I am allowed to run GitLab without HTTPS but for CI, HTTPS is forced!"},"comment":{"url":"https://api.github.com/repos/gitlabhq/gitlabhq/issues/comments/71127364","html_url":"https://github.com/gitlabhq/gitlabhq/issues/8632#issuecomment-71127364","issue_url":"https://api.github.com/repos/gitlabhq/gitlabhq/issues/8632","id":71127364,"user":{"login":"Stayallive","id":1090754,"avatar_url":"https://avatars.githubusercontent.com/u/1090754?v=3","gravatar_id":"","url":"https://api.github.com/users/Stayallive","html_url":"https://github.com/Stayallive","followers_url":"https://api.github.com/users/Stayallive/followers","following_url":"https://api.github.com/users/Stayallive/following{/other_user}","gists_url":"https://api.github.com/users/Stayallive/gists{/gist_id}","starred_url":"https://api.github.com/users/Stayallive/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Stayallive/subscriptions","organizations_url":"https://api.github.com/users/Stayallive/orgs","repos_url":"https://api.github.com/users/Stayallive/repos","events_url":"https://api.github.com/users/Stayallive/events{/privacy}","received_events_url":"https://api.github.com/users/Stayallive/received_events","type":"User","site_admin":false},"created_at":"2015-01-23T00:28:21Z","updated_at":"2015-01-23T00:28:21Z","body":"If I'm not mistaken OAuth 2.0 requires the use of SSL/TLS for transport layer security to make it secure.\r\n\r\nFor reference: http://tools.ietf.org/html/rfc6749"}}