Inability to access engine tribe from nmweb #1
Description
When you try to login, you may encounter this error:
Blocked loading mixed active content “http://enginetribe.gq:30000/user/login"
Since the Engine Tribe server is on http, browsers refuse to send a request to the server from an https page due to mixed content. So, one of these must be true:
- user accesses nmweb through http
- user ignores mixed-content
- server uses https
However, even after this issue is resolved, there is another issue. The server sends the following HTTP response header:
Access-Control-Allow-Origin: www.enginetribe.gq
Since the web request originates from nmweb.enginetribe.gq, it doesn't match the response header, and the browser refuses to read the response.