allow webAuthn when server is localhost

This commit is contained in:
Daniel Seifert 2022-10-28 15:02:28 +02:00
parent 71a1f8e53b
commit 667c516a00
Signed by: DanielS
GPG Key ID: 8A7C4C6ED1915C6F

View File

@ -24,11 +24,10 @@ class Webauthn
public function isAvailable() public function isAvailable()
{ {
if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on') { if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' || // is HTTPS
return true; !empty($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https' ||
} !empty($_SERVER['HTTP_X_FORWARDED_SSL']) && $_SERVER['HTTP_X_FORWARDED_SSL'] == 'on' ||
if (!empty($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https' || in_array($_SERVER['REMOTE_ADDR'], ['127.0.0.1', '::1']) // is localhost
!empty($_SERVER['HTTP_X_FORWARDED_SSL']) && $_SERVER['HTTP_X_FORWARDED_SSL'] == 'on'
) { ) {
return true; return true;
} }