[BUG] Devtools doesn't allow insecure websocket over a secure (https) page

[nireak]

Hello

When I'm running the app over a secure (https) connection I get an error: "SecurityError: Failed to construct 'WebSocket': An insecure WebSocket connection may not be initiated from a page loaded over HTTPS." originating at src/Devtools.ts:33

this.ws = new WebSocket(`ws://${host}?name=${this.name}`)

How can I use from an https page?
perhaps changing the websocket protocol to a secure one ?

window.location.protocol === 'https' ? wss : ws

Or it is not as easy? Perhaps, although you change your code, it would need some kind of certificate, etc...

Thanks!

[eivindr]

It would help if the quick fix provided by nireak could be applied. You don't necessarily need to support wss directly in the devtools since one could create a simple websocket proxy (nginx/caddy etc). The proxy is then configured with certificates but pass the websocket unencrypted to devtools.

[christianalfoni]

@eivindr @nireak Hi there!

What browser are you using? With Chrome you can connect from https to http websocket 😄

You should be able to set option: devtools: 'wss://localhost:3031' and do something like @eivindr suggests.

But yeah, this is a bit tricky... but works great with Chrome

[lavir]

@christianalfoni are you sure that the protocol in devtools option can be overwritten?

overmind/packages/node_modules/overmind/src/Devtools.ts

Line 32 in 6697d62

this.ws = new WebSocket(`ws://${host}?name=${this.name}`)

[nireak]

Thanks for the suggestions but I haven't been able to implement them.

I'm using Chrome and Opera.

I wanted to use overmind devtools while developing at Amazon Cloud9 IDE that runs on a EC2 instance remotely. My running app has then some url like https://xxxxxxxxx.vfs.cloud9.us-east-1.amazonaws.com/.

I know it's a very specific use case. :(