Mixed Content: The page at https was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://0.0.0.0:5000/api/users/login'. This request has been blocked; the content must be served over HTTPS. code example

Example: mixed content: the page at was loaded over https, but requested an insecure xmlhttprequest endpoint

Add below code to your index.php file for on the https

 if((!empty( $_SERVER['HTTP_X_FORWARDED_HOST'])) || (!empty( $_SERVER['HTTP_X_FORWARDED_FOR'])) ) {
 	$_SERVER['HTTP_HOST'] = $_SERVER['HTTP_X_FORWARDED_HOST'];
 	$_SERVER['HTTPS'] = 'on';
 }