All requests are done using HTTPS about envault HOT 5 CLOSED

Hey, yes HTTPS is forced. Otherwise, your environment variables would be transported unencrypted across the network. We're not taking responsibility for security vulnerabilities because of that.

from envault.

Hey, tks for replying.

I get the reason why it should be HTTPS, although, for testing locally, I don't have an SSL certificate. And the responsibility of using HTTP or HTTPS should be from the user, not the app.

As I mentioned we can use the whole APP_URL, we can display a warning message if APP_URL protocol is not HTTPS, which makes it more open to others usage not only production environment.

And on envault CLI, we remove the HTTPS, since $server will have the whole URL.

Best regards.

from envault.

If you'd like to make a PR to the CLI to fix this, you're more than welcome.

from envault.

Awesome! Will do.

Best regards

from envault.

Hey @danharrin

Just created the PR on the CLI and Envault, take a look and let me know if any changes are necessary.

regards

from envault.