Bug 1178413 - GMail OAuth2 scope should be https:// not http://. r=rkent a=IanN for SeaMonkey 2.35 CLOSED TREE SEAMONKEY_2_35_RELEASE_BRANCH
authorMagnus Melin <mkmelin+mozilla@iki.fi>
Tue, 30 Jun 2015 23:34:50 +0300
branchSEAMONKEY_2_35_RELEASE_BRANCH
changeset 26105 09008d5431802c9a52eb942d9d1ee1ef244425da
parent 26104 ff8791041841bc1019f456da99d414bf81cc4840
child 26106 7171d7f121da995b1cc995083873af4c021f2cef
push id1850
push userclokep@gmail.com
push dateWed, 08 Mar 2017 19:29:12 +0000
treeherdercomm-esr52@028df196b2d9 [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersrkent, IanN
bugs1178413
Bug 1178413 - GMail OAuth2 scope should be https:// not http://. r=rkent a=IanN for SeaMonkey 2.35 CLOSED TREE
mailnews/base/util/OAuth2Providers.jsm
--- a/mailnews/base/util/OAuth2Providers.jsm
+++ b/mailnews/base/util/OAuth2Providers.jsm
@@ -6,20 +6,20 @@
  * Details of supported OAuth2 Providers.
  */
 var EXPORTED_SYMBOLS = ["OAuth2Providers"];
 
 const {classes: Cc, interfaces: Ci, results: Cr, utils: Cu} = Components;
 
 // map of hostnames to [issuer, scope]
 const kHostnames = new Map([
-  ["imap.googlemail.com", ["accounts.google.com", "http://mail.google.com/"]],
-  ["smtp.googlemail.com", ["accounts.google.com", "http://mail.google.com/"]],
-  ["imap.gmail.com", ["accounts.google.com", "http://mail.google.com/"]],
-  ["smtp.gmail.com", ["accounts.google.com", "http://mail.google.com/"]],
+  ["imap.googlemail.com", ["accounts.google.com", "https://mail.google.com/"]],
+  ["smtp.googlemail.com", ["accounts.google.com", "https://mail.google.com/"]],
+  ["imap.gmail.com", ["accounts.google.com", "https://mail.google.com/"]],
+  ["smtp.gmail.com", ["accounts.google.com", "https://mail.google.com/"]],
 ]);
 
 // map of issuers to appKey, appSecret, authURI, tokenURI
 
 // For the moment, these details are hard-coded, since Google does not
 // provide dynamic client registration. Don't copy these values for your
 // own application--register it yourself. This code (and possibly even the
 // registration itself) will disappear when this is switched to dynamic