SSL is required on Auth

[BrookeDot]

I'm getting a 400 error when trying to run auth_web.py it seems SSL/HTTPS is required to auth an app.

[xiongyihui]

It seems HTTPS is not a must-be, HTTP should work

[BrookeDot]

Hi @xiongyihui The instructions say "Return URL protocal must be HTTPS" which lines up with the error I see when visiting localhost:3000

The redirect URI you provided has not been whitelisted for your application. Please add your redirect URI in the 'Allowed Return URLs' section under 'Web Settings' for your Security Profile on Amazon Developer Portal.
Request Details
scope=alexa%3Aall
redirect_uri=http%3A%2F%2Flocalhost%3A3000%2Fauthresponse
response_type=code
client_id=amzn1.application-oa2-client.XXXXX
scope_data=%7B%22alexa%3Aall%22%3A+%7B%22productInstanceAttributes%22%3A+%7B%22deviceSerialNumber%22%3A+%22001%22%7D%2C+%22productID%22%3A+%22XXX%22%7D%7D```