Upgrade to 3.0.2

2019-02-19 16:39:58 +01:00
parent f76ee1bb14
commit 8e3d86a590
44 changed files with 638 additions and 264 deletions
--- a/kirby/src/Cms/Auth.php
+++ b/kirby/src/Cms/Auth.php
@@ -69,8 +69,8 @@ class Auth
            throw new InvalidArgumentException('Invalid authorization header');
        }

-        // only allow basic auth when https is enabled
-        if ($request->ssl() === false) {
+        // only allow basic auth when https is enabled or insecure requests permitted
+        if ($request->ssl() === false && $this->kirby->option('api.allowInsecure', false) !== true) {
            throw new PermissionException('Basic authentication is only allowed over HTTPS');
        }