From: Tom Hughes <tom@compton.nu>
Date: Tue, 20 Apr 2021 17:52:57 +0000 (+0100)
Subject: Allow OAuth 2 to redirect to plain HTTP for localhost
X-Git-Tag: live~1613^2~6
X-Git-Url: https://git.openstreetmap.org/rails.git/commitdiff_plain/aa9ce8b6dbdbe20794d111a6ba6e65b52e079d7e

Allow OAuth 2 to redirect to plain HTTP for localhost
---

diff --git a/config/initializers/doorkeeper.rb b/config/initializers/doorkeeper.rb
index bc70f02f0..532e97256 100644
--- a/config/initializers/doorkeeper.rb
+++ b/config/initializers/doorkeeper.rb
@@ -241,7 +241,9 @@ Doorkeeper.configure do
   # #call can be used in order to allow conditional checks (to allow non-SSL
   # redirects to localhost for example).
 
-  force_ssl_in_redirect_uri !Rails.env.development?
+  force_ssl_in_redirect_uri do |uri|
+    !Rails.env.development? && uri.host != "127.0.0.1"
+  end
 
   # Specify what redirect URI's you want to block during Application creation.
   # Any redirect URI is whitelisted by default.