Hello Mapperkids,
In your description, you mention: “the non-secure endpoint [is] within the app that running on standard app engine” and that “there is no way [you] can ask the source to enable https” (assuming the source is the same GAE standard app). You also added that you are able to modify the app.yaml to remove ‘secure: always’.
To help us better understand the setup, can you clarify a few things:
- Can you confirm removing the ‘secure: always’ parameter from all handlers in the app.yaml?
- Does the app.yaml that you modified belong to the same app containing the endpoint?
- Are you trying to reach the endpoint from within the same app, or are they two different GAE apps where one is sending a request to the other?
- If they are two different GAE apps, are they located within the same project?