OAuth traffic via your servers
-
Hello,
At https://updraftplus.com/faqs/what-data-is-gathered-when-updraftplus-is-used-and-how-is-that-data-processed/ you note that any authentication to a storage service that use OAuth – is passing via your servers.
Why is it needed? why can’t the plugin do the authentication process directly with the target service? without passing via your servers
-
Hi,
It is needed because it is an important part of the OAuth2 authorisation flow.
https://www.oauth.com/oauth2-servers/redirect-uris/
As the redirect URL has to be defined in the OAuth application and sent with requests to the authorisation server it needs to be something we know and doesn’t change.
So it has to be our server address as it would be impossible to use each and every persons own website address across the millions of UpdraftPlus installs.
If your not comfortable with that passing through our servers you could always setup your own OAuth server/application at your chosen service and then overwrite the default redirect url and OAuth tokens via defines in your wp-config.php
Or you can use a non OAuth service.
Best Wishes,
Ashley
- The topic ‘OAuth traffic via your servers’ is closed to new replies.
