Question

我正在一个网站（名称为https://tutumluannev2test.derinpos.com/）上工作。我一直在尝试添加Facebook登录名。在本地主机上没有问题，但是在登台时，我总是收到以下错误消息：

不安全的登录被阻止：您无法获取访问令牌或从不安全的页面登录该应用。尝试将页面重新加载为https：//

这是一个 ASP.NET Core 2.1 项目。
由ubuntu 16.04的 nginx 提供服务
有效的OAuth重定向URI ：https://tutumluannev2test.derinpos.com/signin-facebook
https://www.facebook.com/v2.12/dialog/oauth?client_id=201510504064809&scope=public_profile%2Cemail&response_type=code&redirect_uri=http%3A%2F%2Ftutumluannev2test.derinpos.com%2Fsignin-facebook&state= ...

nginx.conf：

server {
    listen 80 
    return 301 https://$host$request_uri;
}
server {
    listen 443 ssl;
    server_name   tutumluannev2test.derinpos.com;
    location / {
        proxy_set_header X-Forwarded-SSL on;
        proxy_set_header X-Forwarded-Protocol $scheme;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Host $host;    
        proxy_pass http://localhost:5003;
        proxy_http_version 1.1;
    }
    add_header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload";
    add_header X-Frame-Options DENY;
    add_header X-Content-Type-Options nosniff;

    ssl_certificate /etc/letsencrypt/live/tutumluannev2test.derinpos.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/tutumluannev2test.derinpos.com/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;

}

有人可以帮助我吗？

预先感谢

不安全的登录被阻止

0 个答案: