API to refresh principals is using HTTP #176
Description
In
the call is using HTTP not HTTP to fetch principals. Exposes the API to a MITM attack.
Seems like this behavior should be configurable and the default should be HTTPS
{{ message }}
In
the call is using HTTP not HTTP to fetch principals. Exposes the API to a MITM attack.
Seems like this behavior should be configurable and the default should be HTTPS