# Origin does not have permission to use Geolocation service

**URL:** <https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702>\
**Category:** Web\
**Created:** [October 2, 2016, 12:33am UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702 "2016-10-02T00:33:35Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Etienne\_Pilon](https://forum.xojo.com/user_avatar/forum.xojo.com/etienne_pilon/32/503_2.png) [@Etienne\_Pilon](https://forum.xojo.com/u/Etienne_Pilon)\
**Post date:** [October 2, 2016, 12:33am UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/1 "2016-10-02T00:33:35Z")

</div>

```auto
Origin does not have permission to use Geolocation service
```

I’ve got this error when i’m trying to get the location on my iPhone, but it works on my MacBook…  
Yes, on my iPhone location services are open and safari and chrome can use it

i tested it from this url in my local network : myMacbook.local:8080, i dont know if the domain have something to do with that :-/

---

<div class="post-metadata">

**Author:** ![Etienne\_Pilon](https://forum.xojo.com/user_avatar/forum.xojo.com/etienne_pilon/32/503_2.png) [@Etienne\_Pilon](https://forum.xojo.com/u/Etienne_Pilon)\
**Post date:** [October 10, 2016, 3:29pm UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/2 "2016-10-10T15:29:26Z")

</div>

no idea ?

---

<div class="post-metadata">

**Author:** ![DerkJ](https://forum.xojo.com/letter_avatar_proxy/v4/letter/d/e495f1/32.png) [@DerkJ](https://forum.xojo.com/u/DerkJ)\
**Post date:** [October 10, 2016, 4:29pm UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/3 "2016-10-10T16:29:09Z")

</div>

You need to use SSL for sensitive data. I guess apple is enforcing secure connections for sensor output on browsers.

---

<div class="post-metadata">

**Author:** ![Michel\_Bujardet](https://forum.xojo.com/user_avatar/forum.xojo.com/michel_bujardet/32/252_2.png) [@Michel\_Bujardet](https://forum.xojo.com/u/Michel_Bujardet)\
**Post date:** [October 10, 2016, 5:32pm UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/4 "2016-10-10T17:32:42Z")

</div>

THis may have to do : [http://blog.xojo.com/2016/07/27/app-transport-security-for-ios/](http://blog.xojo.com/2016/07/27/app-transport-security-for-ios/)

---

<div class="post-metadata">

**Author:** ![Etienne\_Pilon](https://forum.xojo.com/user_avatar/forum.xojo.com/etienne_pilon/32/503_2.png) [@Etienne\_Pilon](https://forum.xojo.com/u/Etienne_Pilon)\
**Post date:** [October 13, 2016, 1:20am UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/5 "2016-10-13T01:20:30Z")

</div>

i tried [this](http://developer.xojo.com/standalone-ssl), but can’t run the webapp on ssl :-/

i did the certificate, they are copied directly with the build app (or debug app) same name as the app…

i tried from debug

```auto
--secureport=8888 --MaxSecureSockets=200
```

i ran it from terminal too

```auto
myappp --secureport=8888 --MaxSecureSockets=200
```

i tried different url too

mylaptop.local  
ip that run the webapp ( tried from the same machine and from an other computer)  
127.0.0.1 (on the same computer)

the only port that works, is the standard… ☹

---

<div class="post-metadata">

**Author:** ![DerkJ](https://forum.xojo.com/letter_avatar_proxy/v4/letter/d/e495f1/32.png) [@DerkJ](https://forum.xojo.com/u/DerkJ)\
**Post date:** [October 13, 2016, 5:22am UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/6 "2016-10-13T05:22:10Z")

</div>

the best, and only way would be using a proxy software tool (on lan) with self signed ssl cert.  
I’m looking into this, and might come up with a solution.

---

<div class="post-metadata">

**Author:** ![Michel\_Bujardet](https://forum.xojo.com/user_avatar/forum.xojo.com/michel_bujardet/32/252_2.png) [@Michel\_Bujardet](https://forum.xojo.com/u/Michel_Bujardet)\
**Post date:** [October 13, 2016, 10:13am UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/7 "2016-10-13T10:13:45Z")

</div>

For myself, I have ordered certificates for all my strategic sites. Already, Chrome signals non https sites as “not safe”.

Most hosts provide certificates to do https: for less than $50 a year, and often, much less.

---

<div class="post-metadata">

**Author:** ![DerkJ](https://forum.xojo.com/letter_avatar_proxy/v4/letter/d/e495f1/32.png) [@DerkJ](https://forum.xojo.com/u/DerkJ)\
**Post date:** [October 13, 2016, 6:49pm UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/8 "2016-10-13T18:49:20Z")

</div>

[quote=291625:@Michel Bujardet]For myself, I have ordered certificates for all my strategic sites. Already, Chrome signals non https sites as “not safe”.

Most hosts provide certificates to do https: for less than $50 a year, and often, much less.[/quote]

No, there is no need to pay for SSL.  
Let’s encrypt is free, changes the certificates every month.  
StartSSL is free too, but somewhat more complex.

---

<div class="post-metadata">

**Author:** ![Michel\_Bujardet](https://forum.xojo.com/user_avatar/forum.xojo.com/michel_bujardet/32/252_2.png) [@Michel\_Bujardet](https://forum.xojo.com/u/Michel_Bujardet)\
**Post date:** [October 13, 2016, 7:10pm UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/9 "2016-10-13T19:10:58Z")

</div>

[quote=291782:@Derk Jochems]No, there is no need to pay for SSL.  
Let’s encrypt is free, changes the certificates every month.  
StartSSL is free too, but somewhat more complex.[/quote]

I have other concerns than renewing certificate all the time or saving a few bucks. At one point, there are economies that end up costing. For instance when one forgets to renew and ends up with a site that says “dangerous” to visitors.

But hey, each one his options.

---

<div class="post-metadata">

**Author:** ![Tim\_Parnell](https://forum.xojo.com/user_avatar/forum.xojo.com/tim_parnell/32/161_2.png) [@Tim\_Parnell](https://forum.xojo.com/u/Tim_Parnell)\
**Post date:** [October 13, 2016, 7:12pm UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/10 "2016-10-13T19:12:30Z")

</div>

> [@291796:@Michel Bujardet](#):
>
> For instance when one forgets to renew and ends up with a site that says “dangerous” to visitors.

Letsencrypt sends out “your certs are about to expire” emails to help 🙂

---

<div class="post-metadata">

**Author:** ![DerkJ](https://forum.xojo.com/letter_avatar_proxy/v4/letter/d/e495f1/32.png) [@DerkJ](https://forum.xojo.com/u/DerkJ)\
**Post date:** [October 13, 2016, 10:20pm UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/11 "2016-10-13T22:20:35Z")

</div>

> [@291798:@Tim Parnell](#):
>
> Letsencrypt sends out “your certs are about to expire” emails to help 🙂

And it will auto-renew them by default.

---

<div class="post-metadata">

**Author:** ![Etienne\_Pilon](https://forum.xojo.com/user_avatar/forum.xojo.com/etienne_pilon/32/503_2.png) [@Etienne\_Pilon](https://forum.xojo.com/u/Etienne_Pilon)\
**Post date:** [October 13, 2016, 10:23pm UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/12 "2016-10-13T22:23:57Z")

</div>

It’s simply not connect, i dont receive the “unsafe site” … Only a “cant connect” from any device or computer to the ssl port…

---

<div class="post-metadata">

**Author:** ![Tim\_Parnell](https://forum.xojo.com/user_avatar/forum.xojo.com/tim_parnell/32/161_2.png) [@Tim\_Parnell](https://forum.xojo.com/u/Tim_Parnell)\
**Post date:** [October 13, 2016, 10:28pm UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/13 "2016-10-13T22:28:07Z")

</div>

> [@291832:@Derk Jochems](#):
>
> And it will auto-renew them by default.

Oh that’s a new feature, I thought you had to manually set up the auto-renew cron.

---

<div class="post-metadata">

**Author:** ![Michel\_Bujardet](https://forum.xojo.com/user_avatar/forum.xojo.com/michel_bujardet/32/252_2.png) [@Michel\_Bujardet](https://forum.xojo.com/u/Michel_Bujardet)\
**Post date:** [October 13, 2016, 10:33pm UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/14 "2016-10-13T22:33:12Z")

</div>

My personal option is to purchase a certificate for three years and forget about it. With 1701, it is not even the price of my cheapest product. They install for me, and I can concentrate on what I do best.

Once again, its my personal option. I rather complete a lucrative app, than waste time managing things to save a few bucks.

Anybody has the privilege to go for the cheap. It only comes with an amount of DIY I am not ready to do.

> [@291833:@Etienne Pilon](#):
>
> It’s simply not connect, i dont receive the “unsafe site” … Only a “cant connect” from any device or computer to the ssl port…

Etienne, what is the app you are running ?

What does it do exactly ? If the message about geolocation shows it, it means you are trying to get geolocation, unless I am mistaken. Are you using an API ? Which one ? Care to post your code ?

I am running Eddies Electronics on my iMac and accessing it with the iPad with no issue at all.

---

<div class="post-metadata">

**Author:** ![Etienne\_Pilon](https://forum.xojo.com/user_avatar/forum.xojo.com/etienne_pilon/32/503_2.png) [@Etienne\_Pilon](https://forum.xojo.com/u/Etienne_Pilon)\
**Post date:** [October 14, 2016, 1:16am UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/15 "2016-10-14T01:16:39Z")

</div>

> [@291013:@Michel Bujardet](#):
>
> THis may have to do : [App Transport Security for iOS – Xojo Programming Blog](http://blog.xojo.com/2016/07/27/app-transport-security-for-ios/)

It’s a webapp, and i’m not able to run it on ssl

---

<div class="post-metadata">

**Author:** ![Michel\_Bujardet](https://forum.xojo.com/user_avatar/forum.xojo.com/michel_bujardet/32/252_2.png) [@Michel\_Bujardet](https://forum.xojo.com/u/Michel_Bujardet)\
**Post date:** [October 14, 2016, 1:47am UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/16 "2016-10-14T01:47:24Z")

</div>

[http://travel.viamichelin.com/web/faq?section=FAQ\_MOB\_Geolocalisation\_GBR](http://travel.viamichelin.com/web/faq?section=FAQ_MOB_Geolocalisation_GBR)

---

<div class="post-metadata">

**Author:** ![DerkJ](https://forum.xojo.com/letter_avatar_proxy/v4/letter/d/e495f1/32.png) [@DerkJ](https://forum.xojo.com/u/DerkJ)\
**Post date:** [October 14, 2016, 2:00am UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/17 "2016-10-14T02:00:02Z")

</div>

> [@291834:@Tim Parnell](#):
>
> Oh that’s a new feature, I thought you had to manually set up the auto-renew cron.

Not with the version i use…  
Never have refreshed the cert, every month i see a new signature.

---

<div class="post-metadata">

**Author:** ![Etienne\_Pilon](https://forum.xojo.com/user_avatar/forum.xojo.com/etienne_pilon/32/503_2.png) [@Etienne\_Pilon](https://forum.xojo.com/u/Etienne_Pilon)\
**Post date:** [October 14, 2016, 9:05am UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/18 "2016-10-14T09:05:32Z")

</div>

> [@291863:@Michel Bujardet](#):
>
> [http://travel.viamichelin.com/web/faq?section=FAQ\_MOB\_Geolocalisation\_GBR](http://travel.viamichelin.com/web/faq?section=FAQ_MOB_Geolocalisation_GBR)

It’s more than that. It’s simply wont open the page on https from any computer or device

---

<div class="post-metadata">

**Author:** ![Tim\_Parnell](https://forum.xojo.com/user_avatar/forum.xojo.com/tim_parnell/32/161_2.png) [@Tim\_Parnell](https://forum.xojo.com/u/Tim_Parnell)\
**Post date:** [October 14, 2016, 1:49pm UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/19 "2016-10-14T13:49:11Z")

</div>

> [@291921:@Etienne Pilon](#):
>
> It’s more than that. It’s simply wont open the page on https from any computer or device

There’s got to be a message somewhere. If it’s in an iFrame you should see the error message appear in the developer console. In Safari, enable the Develop menu, load up your page, press cmd-option-u. Error count appears next to the stop sign symbol in the top, click that, or the Console tab to see them all listed.

---

<div class="post-metadata">

**Author:** ![Michel\_Bujardet](https://forum.xojo.com/user_avatar/forum.xojo.com/michel_bujardet/32/252_2.png) [@Michel\_Bujardet](https://forum.xojo.com/u/Michel_Bujardet)\
**Post date:** [October 14, 2016, 1:52pm UTC](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702/20 "2016-10-14T13:52:16Z")

</div>

At this point, if the page simply won’t open with any machine, it can be anything. Without seeing any code and very little explanations, could be a butterfly landing on a flower pisselit on the opposite side of the earth 😉

Could even be using the wrong URL, wrong IP address or wrong port, or all three…

[Next page](https://forum.xojo.com/t/origin-does-not-have-permission-to-use-geolocation-service/33702.md?page=2)
