UBUNTU: Mixed Active content blocked. Update tutorial?

[marcojrfurtado]

Hello,

I was running the "animal-kingdom" locally, as indicated here: "https://docs.blockstack.org/develop/zero_to_dapp_2.html".
The tutorial suggests to start the server with npm start, which seems to default to HTTP. Unfortunately, that causes me an error when I try to sign in to Blockstack.

I get a "Failed to fetch information about the app requesting authentication. Please contact the app maintainer to resolve the issue." message. The reason is that a request was blocked while trying to load mixed content:

Blocked loading mixed active content “http://localhost:3000/manifest.json”

Luckily the workaround is as easy as running HTTPS=true npm start. Maybe that part can be updated here, or in the documents.

[moxiegirl]

@marcojrfurtado I haven't seen this reported before. Can you tell me what your platform is? I'll add a tip to the docs about this should someone else run into the same problem.

[marcojrfurtado]

Sure, I am running the server on Ubuntu 18.04 with NodeJS v12.2.0.
Browser is Firefox 66.0.4.

[moxiegirl]

@marcojrfurtado thank you. I'll get that tip added.

[imchriskitchens]

Just wanted to add this reference for anyone running into this issue.

Starting with Firefox 23, Firefox blocks active mixed content by default. This follows a practice adopted by Internet Explorer (since version 9) and Chrome.

This page explains what you should be aware of as a web developer.

https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content/How_to_fix_website_with_mixed_content