From 5466cd8688b956b636473d659c23ee2ff494cbb2 Mon Sep 17 00:00:00 2001
From: Kyle Robbertze <kyle@paddatrapper.com>
Date: Fri, 6 Aug 2021 11:13:00 +0200
Subject: [PATCH] correctly determine protocol from port and configuration in
 PHP

Fixes: #1283
---
 airtime_mvc/application/common/HTTPHelper.php | 16 ++++++++++++----
 airtime_mvc/application/configs/conf.php      |  1 +
 airtime_mvc/build/airtime.example.conf        | 12 ++++++++++++
 3 files changed, 25 insertions(+), 4 deletions(-)

diff --git a/airtime_mvc/application/common/HTTPHelper.php b/airtime_mvc/application/common/HTTPHelper.php
index c3ff70858..c4b5772f7 100644
--- a/airtime_mvc/application/common/HTTPHelper.php
+++ b/airtime_mvc/application/common/HTTPHelper.php
@@ -32,6 +32,7 @@ class Application_Common_HTTPHelper
         $baseDir = $CC_CONFIG['baseDir'];
         $basePort = $CC_CONFIG['basePort'];
         $forceSSL = $CC_CONFIG['forceSSL'];
+        $configProtocol = $CC_CONFIG['protocol'];
         if (empty($baseDir)) {
             $baseDir = "/";
         }
@@ -42,15 +43,22 @@ class Application_Common_HTTPHelper
             $baseDir = $baseDir . "/";
         }
 
+        # Set in reverse order of preference. ForceSSL configuration takes absolute preference, then
+        # the protocol set in config. If neither are set, the port is used to determine the scheme
         $scheme = "http";
-        if ($forceSSL || ($secured && !empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off')) {
+        if ($secured && $basePort == "443") {
             $scheme = "https";
-            $basePort = "443"; //Airtime Pro compatibility hack
+        }
+        if (!empty($configProtocol)) {
+          $scheme = $configProtocol;
+        }
+        if ($forceSSL) {
+          $scheme = "https";
         }
 
         $portStr = "";
-        if (!(($scheme == "http" && $basePort == "80")
-            || ($scheme == "https" && $basePort == "443"))) {
+        if (($scheme == "http" && $basePort !== "80")
+            || ($scheme == "https" && $basePort !== "443")) {
             $portStr = ":${basePort}";
         }
         $stationUrl = "$scheme://${baseUrl}${portStr}${baseDir}";
diff --git a/airtime_mvc/application/configs/conf.php b/airtime_mvc/application/configs/conf.php
index 128a8fe91..ebfa59275 100644
--- a/airtime_mvc/application/configs/conf.php
+++ b/airtime_mvc/application/configs/conf.php
@@ -32,6 +32,7 @@ class Config {
         $CC_CONFIG['stationId'] = $values['general']['station_id'];
         $CC_CONFIG['phpDir'] = $values['general']['airtime_dir'];
         $CC_CONFIG['forceSSL'] = isset($values['general']['force_ssl']) ? $values['general']['force_ssl'] : FALSE;
+        $CC_CONFIG['protocol'] = isset($values['general']['protocol']) ? $values['general']['protocol'] : '';
         if (isset($values['general']['dev_env'])) {
             $CC_CONFIG['dev_env'] = $values['general']['dev_env'];
         } else {
diff --git a/airtime_mvc/build/airtime.example.conf b/airtime_mvc/build/airtime.example.conf
index 5b431dc11..d9350b0c6 100644
--- a/airtime_mvc/build/airtime.example.conf
+++ b/airtime_mvc/build/airtime.example.conf
@@ -33,6 +33,17 @@
 #                    on your webserver, relative to the base_url.
 #                    The default is /.
 #
+# force_ssl:         Use HTTPS for all API calls and internal links,
+#                    even if the web server is not operating on port
+#                    443. This is useful for working behind a reverse
+#                    proxy.
+#                    The default is False.
+#
+# protocol:          Set the specific protocol if required. This is
+#                    useful when using http on port 443. Mutually
+#                    exclusive with force_ssl.
+#                    Default is empty.
+#
 # cache_ahead_hours: How many hours ahead of time the Airtime playout
 #                    engine (pypo) should cache scheduled media files.
 #                    The default is 1.
@@ -54,6 +65,7 @@ base_url = localhost
 base_port = 80
 base_dir = /
 force_ssl =
+protocol = 
 cache_ahead_hours = 1
 airtime_dir =
 station_id =