remove form target to fix http vs https issue

Keleo · Dec 4, 2024 · b4e6469 · b4e6469
1 parent b261ac9
commit b4e6469
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,7 @@
 
 Compatibility: requires minimum Kimai 2.25.0
 
+- Remove form target (password protection) to prevent proxy issues with http vs https
 - Removed md5 password from session key
 - Use non-deprecated API to fetch timesheets
 

diff --git a/Resources/views/view/auth.html.twig b/Resources/views/view/auth.html.twig
@@ -8,7 +8,7 @@
 
         <div class="card card-md">
             <div class="card-body">
-                <form action="{{ app.request.uri }}" method="POST">
+                <form action="" method="POST">
                     {% if invalidPassword %}
                         <div class="alert alert-important alert-danger">{{ 'Invalid credentials.' | trans({}, 'security') }}</div>
                     {% endif %}