SignIn Error : 400 BAD REQUEST about edx-app-ios

[mikekatz]

Are you building with iOS 9 and your endpoint is HTTP and not HTTPS? If so you might be running into App Transport Security.

[mrimadali]

@mikekatz I'm building for iOS 8 not yet for iOS 9. And the End point Url is HTTP not HTTPS. We've downloaded the master copy and followed the ReadMe and configured the same.
We're able to register but not Sign In, It throws 400 Err. Please suggest ?

[aleffert]

Hi @mrimadali you probably need to set up your server not to require SSL for OAUTH. You need to set the OAUTH_ENFORCE_SECURE flag in your server config to false.

[mrimadali]

Thanks @aleffert, I Will check those settings and give a try.

[kythanh]

Hi @aleffert
By adding OAUTH_ENFORCE_SECURE: false flag I can call login without SSL. But now I got issue when calling /api/mobile/v0.5/my_user_info. Response from server:

{
    detail = "Authentication credentials were not provided.";
}

Do you have any idea?

[kythanh]

I've sorted this issue by updating settings in server. This is django config issue.

[travisnewby]

@kythanh,

For those of us encountering the same issue, can you post what configuration you had to change?

---

Update:
The configuration change can be found here. You must add the line: WSGIPassAuthorization On

[phyominthu]

@mrimadali Was the issue fixed for you? What did you change?

@aleffert OAUTH_ENFORCE_SECURE is already set to false on both development and production servers. I can sign in to our development server, but strangely, I can't sign in to production. Is there anything else I can do to fix this?