[Data Grid] DataGrid RestURL http vs https

Forge Component
(32)
Published on 4 Dec (8 days ago) by OutSystems R&D
32 votes
Published on 4 Dec (8 days ago) by OutSystems R&D

I have an API running which I want the DataGrid widget to consume, however the API is running on http rather than https causing the following errors to appear in the console when i inspect the element within the browser. 

"GridFramework.js?90323:4509 Mixed Content: The page at 'https://API/ApiTest.aspx?_ts=001' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'https://API/TEST'. This request has been blocked; the content must be served over HTTPS."

and 


"getGridData @ GridFramework.js?90323:4509
GridFramework.js?90323:4502 An error ocurred while fetching the Grid JSON"


The table loads however it is empty, I have tested the URL in browser and it returns the correct information in JSON format.

Security isn't an issue for us as both the outsystems and API are running on a private network. I know the API works as outstystems can consume the API through a normal REST action.


Is it possible to change any settings to allow DataGrid to accept the http API?


Thanks in advance.

Solution

Hi Alex,

It is actually your browser which is blocking the request. This is a security feature of modern browsers.

The solution is either to load your page with only HTTP or load your API with HTTPS.

Nowadays it is quite straight forward to expose a HTTPS API, and strongly recommended to use HTTPS.  So the preferred option would be to allow HTTPS in your API.

This page might help explain the details, much better than I could.

https://developers.google.com/web/fundamentals/security/prevent-mixed-content/what-is-mixed-content

I hope this helps!

Kind regards,

Stuart

Solution