HTTPS to local HTTP - how to make login work?(Or, how to properly redirect HTTPS to HTTP?)

@MohamedTammam thanks but how do I install a certificate in local? Is it possible?

@Ligonsker Not really, try installing OpenSSL.

@MohamedTammam thanks I will try.

Btw as you see above, when I change the form to https then I get 419 Expired. Could that be because the CSRF token is being hashed when using HTTPS, then it sends the hashed value to my local PC which doesn't know how to read it?

@Ligonsker Yes, just change the APP_URL. and if you open the website using HTTPS then the form should point to HTTPS.

@Ligonsker what about you type http://example.com in browser, the traffic pointing to https://example.com ?

@Ligonsker i want to know what happen if use relative path

<form method="POST" action="{{ route('login', [], false) }}">

or

<form method="POST" action="/login">

@newbie360 That would work, but I would always use HTTPS incase the network has an error I get notified that the app doesn't work by users.

That's why I think it's better to use route method and change the URL using .evn variable depending on the environment.

@MohamedTammam hmm i don't know is that good or bad, i write a helper use it all the time

    function routeUri(string $routeName, $parameters = []): string
    {
        return route($routeName, $parameters, false);
    }

{{ routeUri('posts.create') }}

and i saw Laracasts is use relative path too, inspect the left menu link

@newbie360 Omg what? That works! But how O_O

I mean when I write {{ route('login', [], false) }}

@Ligonsker the 3rd parameter of helper route() default is true, and it will output a full URL

you can make a wrapper, set it false

    function routeUri(string $routeName, $parameters = []): string
    {
        return route($routeName, $parameters, false);
    }

//  http://example.com/posts/create
{{ route('posts.create') }}

//  /posts/create
{{ routeUri('posts.create') }}

//  /posts/show/1
{{ routeUri('posts.show', $post) }}

@Ligonsker If you need local encryption while developing, you can let Laravel Valet create the certificate for you.

I don't know what type of local development environment you have, but I can highly recommend Laravel Valet. Super easy to set up and to use.

https://laravel.com/docs/9.x/valet#securing-sites

@newbie360 but in my case it doesn't look like I need wrapper because now it works for both. But how? I thought that the website on https encrypts the data and in this case even the csrf token. So what happens here? I log in from the https website that sends the form parameters encrypted because of the SSL, but my actual app is not using SSL. So how can it read this data?

@Ligonsker well no idea =( i never pointing the domain name to local development