allow webAuthn when server is localhost

This commit is contained in:
Daniel Seifert 2022-10-28 15:02:28 +02:00
bovenliggende 71a1f8e53b
commit 667c516a00
Getekend door: DanielS
GPG sleutel-ID: 8A7C4C6ED1915C6F
1 gewijzigde bestanden met toevoegingen van 4 en 5 verwijderingen

Bestand weergeven

@ -24,11 +24,10 @@ class Webauthn
public function isAvailable()
{
if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on') {
return true;
}
if (!empty($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https' ||
!empty($_SERVER['HTTP_X_FORWARDED_SSL']) && $_SERVER['HTTP_X_FORWARDED_SSL'] == 'on'
if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' || // is HTTPS
!empty($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https' ||
!empty($_SERVER['HTTP_X_FORWARDED_SSL']) && $_SERVER['HTTP_X_FORWARDED_SSL'] == 'on' ||
in_array($_SERVER['REMOTE_ADDR'], ['127.0.0.1', '::1']) // is localhost
) {
return true;
}