[REQ] api.openapi-generator.tech should be behind TLS

I like the online generator: https://api.openapi-generator.tech/index.html. And as you can see from clicking on that link HTTPS is supported. But it's not in the docs, and the server also accepts connections without redirect on plain HTTP. The generated projects also have links to HTTP URLs even if you use HTTPS to interact with it.

I debated whether to post this as a bug (I think it is), but happy to discuss either way. It could be that it is just not intended for production use, and that is justification enough for some people. But these days there are too many vulnerabilities associated with plain HTTP services to make it worth the risk IMO. I'm sure the host has support for TLS, so why not use it?

Inspecting response headers it looks like CloudFlare is actually fronting the service anyway, and I'm sure there must be a checkbox there for "HTTPS only". Should be easy for someone?

Start by inspecting api.openapi-generator.tech over both HTTP and HTTPS, including its response headers, then check the documentation and generated projects for HTTP links. Confirm whether the service is fronted by CloudFlare and where its TLS or redirect behavior is configured. Done means HTTP requests redirect securely and documented or generated links use HTTPS.