(insecure_transport) OAuth 2 MUST utilize https.

My site is fully SSL secured. Yet when I try to exchange the code I get this: (insecure_transport) OAuth 2 MUST utilize https.. Chrome shows me the following message: The page includes a form with a non-secure "action" attribute.

Yet I can’t really figure out what the problem is. I double checked and the only requests I made are to the Google Apis which are fully secured.

My function looks like this:

def exchange_code(request): #/setup
    oauth = get_oauth()
    authorization_code = request.build_absolute_uri()

    try:
        token = oauth.fetch_token(
                                'https://accounts.google.com/o/oauth2/token',
                                authorization_response=authorization_code,
                                client_secret=settings.GOOGLE_OAUTH2_CLIENT_SECRET)
    except MissingCodeError as error:
        return error_page(request, error)

What can be the problem?

[Stift007]

This should help

import os 
os.environ['OAUTHLIB_INSECURE_TRANSPORT'] = '1'

[arun542]

This might be because of “authorization_code = request.build_absolute_uri()”. Have you tried printing it. It should contain “https” not “http”. If it is not generating https the replace the string. Worked for me