How can enable http request in the https website? - amazon-web-services

Because I have a backend api with http url, if I need to call api from frontend I need to send api request through http. My frontend was deployed to AWS Amplify, it runs as https. When I send api request it was blocked. console said: Mixed Content: The page at https//XXXX was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint http://XXXXX This request has been blocked; the content must be served over HTTPS.
how can I use http request here?

Related

Do I need to connect default firebase domain in order to get SSL certificate?

I've deployed the frontend of a web app to Firebase. Now when I try to make request I see that request is going to https://the_url but the backend link is http://the_url and I get the following error.
Mixed Content: The page at 'https://the_url' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://the_url. This request has been blocked; the content must be served over HTTPS.
I tried to get SSL certificate and import an certificate to AWS to make connection https, but I wasn't able to get it.

Set-Cookie blocked because Domain

My API and my frontend are hosted on render.com but at different subdomains. When I log in, my API send a cookie with SameSite=None, Secure=true and frontend domain. But Chrome refused to set the cookie and block it. How to handle this situation? What I am missing?

HTTPS Request issue = requested an insecure XMLHttpRequest endpoint (AWS)

I have deployed a react app on S3 while backend is running on EC2 (node) when I use S3 over HTTP it works and shows content even with route53 over http it works.
If I access domain over HTTPS via route53 it doesnt load the page. I have attached SSL with route 53 but no use.
I have also tried using cloud front and used SSL with it too yet I receive same error.
Error As Follow
"Mixed Content: The page at '' was loaded over HTTPS, but
requested an insecure XMLHttpRequest endpoint ''. This request
has been blocked; the content must be served over HTTPS."

OPTIONS request blocked google endpoints

While making a xhr request from my application browser sends OPTIONS request since i am using endpoints in my project i have all request that have api key with their requests therefore options request also contains api key.
For my api key i have set some http referers on cloud console
Therefore while making OPTIONS request it shows
Referrer Policy:no-referrer-when-downgrade
and no referer is attached to my requests headers for OPTIONS request
hence it shows 403 error to my requests

Can a USSD gateway ignore untrusted certificate errors?

I have a web service installed on Tomcat. I am using HTTPs to call the web service using a self-signed certificate. Calling this web service through HTTPs from PHP (curl) works fine and I get a normal response.
However, when the same HTTPs is sent to a USSD gateway, it does not return any response. It does with the normal HTTP requests.
I am not familiar with the gateway or its implementation. I only wrote the web service to be called but is there a way that the gateway can ignore the "untrusted certificate error" and proceed to send the HTTPs request to the Tomcat server?
Thanks.