Oauth ssl verification

Hello, can I disable ssl verification in oauth?

That sounds like a terrible idea if you plan to do this in production.

For development, try setting this environment variable: OAUTHLIB_INSECURE_TRANSPORT=1

Where is the best place to set it?

I’d just do it when running the dev server…

OAUTHLIB_INSECURE_TRANSPORT=1 indico run ...

1 Like

Not working form me i have still error URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)>. I know it’s dangerous but I need to test it.

For testing in development it’s not dangerous :wink:
Also, please show full tracebacks. I don’t even know where exactly this error is coming from.

Try using plain HTTP for testing. I think invalid certs are always rejected; the env var only allows insecure (= plain) URLs which are usually not allowed for OAuth.

Here is error screen

This working for me PYTHONHTTPSVERIFY=0 indico run ....