My application uses Google's OAuth for authenticating users. For development/debugging purposes I want to be able to run it locally (on my dev. machine). To have the OAuth login functionality work in this mode I can configure the OAuth such that
http://localhost:<some_port> is whitelisted as an authorized origin (see screenshot, below).
- What are the security implications of this?
- Are there any other ways to achieve that? (I believe I can run a local forward proxy but I am not sure how to get it to work with HTTPS)