Sonarqube github oauth login is secured over http?

[Kumar Gaurav]

Dear All,  If I use github authentication plugin on http sonarqube then: Is login data secured over network?

So my sonar instance is: http:mysonar

And github url is: https://mygithub

If I login to mysonar, I am wondering how are my login data handled? Does it go directly to github for authentication? or does it go to Sonarqube first?

Thanks a lot,

Kumar

[Kumar Gaurav]

In github oauth description: "For security reasons HTTP is not supported. HTTPS must be used"

Regards,

Kumar

[G. Ann Campbell]

Hi Kumar,

You need a proxy in between.

Ann

[Kumar Gaurav]

Thanks Ann. I added a reverse-proxy in docker image.. works fine.. :)