Fix display message for unsecure http redirect

GluuFederation · Apr 13, 2020 · 6bddf2e · 6bddf2e
1 parent b08cfed
commit 6bddf2e
Showing 1 changed file with 11 additions and 3 deletions.
diff --git a/server/src/main/java/org/gluu/oxtrust/action/UpdateClientAction.java b/server/src/main/java/org/gluu/oxtrust/action/UpdateClientAction.java
@@ -550,11 +550,19 @@ public void acceptSelectLoginUri() {
 		}
 		if (!this.loginUris.contains(this.availableLoginUri) && checkWhiteListRedirectUris(availableLoginUri)
 				&& checkBlackListRedirectUris(availableLoginUri)) {
-			if (isAcceptable(this.availableLoginUri)) {
+			boolean acceptable = isAcceptable(this.availableLoginUri);
+			if (acceptable) {
 				this.loginUris.add(this.availableLoginUri);
 			} else {
-				facesMessages.add(FacesMessage.SEVERITY_ERROR, "A sector identifier must be defined first.",
-						"A sector identifier must be defined first.");
+				try {
+					if(getProtocol(availableLoginUri).equalsIgnoreCase("http")) {
+						facesMessages.add(FacesMessage.SEVERITY_ERROR,"http schema is only allow for local development.");
+					}else {
+						facesMessages.add(FacesMessage.SEVERITY_ERROR, "A sector identifier must be defined first.");
+					}
+				} catch (MalformedURLException e) {
+				}
+
 			}
 
 		} else {