400 error while signIn about edx-app-ios

[aleffert]

@krishnakanthjb have you enabled oauth support on your edx instance?

[krishnakanthjb]

I got ClientID and Client secret....BTW where to enable that..In the edx-master?

[aleffert]

@krishnakanthjb See the instructions here http://edx-installing-configuring-and-running.readthedocs.org/en/latest/mobile.html in particular section 10.2.1 which will give you the server side configuration keys you need to set.

[krishnakanthjb]

@aleffert : As suggested, We've cross checked and also enabled the following

"FEATURES" : {
...
"ENABLE_MOBILE_REST_API": true,
"ENABLE_OAUTH2_PROVIDER": true,
"ENABLE_COMBINED_LOGIN_REGISTRATION": true
}

in the edx/app/edxapp/lms.env.json. we are still getting the 400 error code.

Xcode Response :

<NSHTTPURLResponse: 0x7fa37b75aef0> { URL: /oauth2/access_token } { status code: 400, headers {
"Cache-Control" = "no-store";
Connection = "keep-alive";
"Content-Language" = en;
"Content-Type" = "application/json";
Date = "Wed, 02 Sep 2015 13:26:33 GMT";
Pragma = "no-cache";
Server = "nginx/1.1.19";
"Set-Cookie" = "sessionid=ab9dbf025e7c4b5799978444127ac138; expires=Wed, 16-Sep-2015 13:26:33 GMT; httponly; Max-Age=1209600; Path=/";
"Transfer-Encoding" = Identity;
Vary = "Accept-Language, Cookie";
"X-Frame-Options" = ALLOW;
} }
Also when we are trying from the firefox REST client tool, it showing the below response.
I'm passing this as body:

{"client-id":"xxxxxxxxxxxxxx",
"username":"[email protected]",
"password":"xxxxxxxx",
"grant-type":"password"}

Response:
Status Code: 400 BAD REQUEST
Cache-Control: no-store
Connection: keep-alive
Content-Language: en
Content-Type: application/json
Date: Wed, 02 Sep 2015 14:26:35 GMT
Pragma: no-cache
Server: nginx/1.1.19
Transfer-Encoding: chunked
Vary: Accept-Language, Cookie
X-Frame-Options: ALLOW
{"error_description": "A secure connection is required.", "error": "invalid_request"}

Seems like this is breaking, pls confirm:
URL: /oauth2/access_token
Please suggest what going wrong, we've configured the setting's as per the ReadMe Notes.

[aleffert]

@krishnakanthjb You probably need to disable the SSL requirement by setting OAUTH_ENFORCE_SECURE in your server config to false. Alternately, you can enable SSL on your server, which is recommended for a production configuration.

[krishnakanthjb]

@aleffert Thanks...Will check and let you know the update..

[phyominthu]

@krishnakanthjb Was the issue fixed for you? What did you change to make it work? I'm having the same problem right now.