Serve clashapi.xyz over HTTPS

[SebastianCApostolescu]

If it's possible serve the content over HTTPS for safer use.

[martincarrera]

Yes, I will do it in a couple of days. Thanks for opening this issue!

[SebastianCApostolescu]

Thank you!

[martincarrera]

Just to keep this up, I'm on it and I will try to serve the content over HTTPS in the next couple of days.

Sorry it took so long, I've been really busy lately.

[chrisbremmer]

@martincarrera did you ever get around to this?

[martincarrera]

@chrisbremmer you can try with this url.

I'm not sure if it's production ready but you can start using it.

[chrisbremmer]

@martincarrera ah that's actually perfect! I'm just messing around with the api for a bootcamp I'm in at the moment and this saves me having to proxy the request. Heroku didn't like the http :/ Thanks a lot though!

[efres1990]

Hi @martincarrera this url https://clashapi.now.sh/ works very well, but is stable? because i am doing a university job and i need with urgency, because heroku and firebase don't works with http.
Thanks and great job.

[martincarrera]

@efres1990 it's as stable as I can make it. Take into account that this is a open source project made in my free time and the hosting is being paid by my own money without help, so I cannot get the best hosting in the market.

This said, it is really stable and I try to monitor the server as much as possible, and also if this crashes you can still create a issue.

Also, if you need me to pay special attention at a fixed time for your university job, let me know and I'll make my best.

[efres1990]

ok @martincarrera I understand the situation and thanks. Congratulations for the work, it works really well, if i had some problem i would tell you. Thanks

[efres1990]

hi @martincarrera i am having problems with https://clashapi.now.sh/api, the server
does not respond (return 500), please can you check it please? I need to deliver my work for college tomorrow

[martincarrera]

There is a problem with the provider I'm using. You can check the status here.

I'm sorry, I'll do all I can but I can't guarantee anything.

[efres1990]

:( ok I am pending, thanks

[efres1990]

Hi @martincarrera, it seems that it already works. Thank you so much.

[martincarrera]

It is, I've just checked that.

Good luck with your college work! Let me know if I can help you with anything :)

[AmirSavand]

I also need this @martincarrera when I open with https:// I get an unsafe warning from google chrome.

[AmirSavand]

Error from chrome console:

angular.js:110 Mixed Content: The page at 'https://<my-site-here>/' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://www.clashapi.xyz/api/random-deck/'. This request has been blocked; the content must be served over HTTPS.

Same for cards.

[efres1990]

Hi AmirSavand in my opinion this is because you have in your proyect http and https request you should change this an only use http or https this is not a problem of the api

[AmirSavand]

@efres1990 I agree. Tho, the unsasfe issue still remains, need secure SSL for the API.

[martincarrera]

You could try https://clashapi.now.sh in order to have HTTPS support.

I'm still not sure about migrating to this new provider so consider this in 'beta'