https Redirect Oauth 2 URL on http page

Question

I have a http home page on which we have a div layover on which we have the google sign in button. When we click on the sign in button we have set the redirect url to be https. However the javascript call window.open does not open the pop up https url on the http page. It works on https parent page. Any idea why this is so and how we can fix it?

Is this policy from Google's side or some mixed content policy is kicking in here ?

Answer 1

我不确定，但我认为这是合乎逻辑的，因为父级可以在子级弹出窗口中设置表单上的值，因此在这种情况下，HTTP页可以在HTTPS页中设置值，这是不可接受的，我认为您必须重定向到google页使用弹出窗口，您可以使用“状态” OAuth参数将用户状态存储在您的应用中