Ah yes. After a successful oauth Amazon redirects the user to some page, which 
contain the needed credentials in the query string. That page needs to be 
whitelisted in Amazon's backend, and they only allow to whistelist httpS://bla 
URLs. With the sole exception of http://localhost or http://127.0.0.1.

This means I have two choices:
* Redirect to localhost and
  - show a blank page for remote setups (where the browser is not opened on the 
same machine as duplicity)
  - implement a web server that answers on localhost
* redirect to a public httpS page that works in all cases.

I think latter is both easier and works in all cases. As you already pointed 
out, in order to show a similar page on duplicity's homepage, 
http://duplicity.nongnu.org/ would need to be served over https (or at least 
offer a redirect that's https → http, although I am not sure Amazon would allow 
that). 

Of course, there is no technical requirement to show anything but a blank 
localhost page. It's just a tad confusing for the user. Ideally Amazon would 
offer such a basic instruction page themselves, but they don't -- or at least I 
couldn't find any.

Cheers
Stefan
-- 
https://code.launchpad.net/~breunigs/duplicity/amazondrive/+merge/309084
Your team duplicity-team is subscribed to branch lp:duplicity.

_______________________________________________
Mailing list: https://launchpad.net/~duplicity-team
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~duplicity-team
More help   : https://help.launchpad.net/ListHelp

Reply via email to