From cd24573599012e68eb2ec294447fb85cab53dcfd Mon Sep 17 00:00:00 2001
From: sbwalker <shaun.walker@siliqon.com>
Date: Wed, 29 Oct 2025 13:36:49 -0400
Subject: [PATCH] only display passkey login when connection is secure

---
 Oqtane.Client/Modules/Admin/Login/Index.razor | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Oqtane.Client/Modules/Admin/Login/Index.razor b/Oqtane.Client/Modules/Admin/Login/Index.razor
index 955f823a..162196ff 100644
--- a/Oqtane.Client/Modules/Admin/Login/Index.razor
+++ b/Oqtane.Client/Modules/Admin/Login/Index.razor
@@ -52,7 +52,7 @@ else
                     </div>
                     <button type="button" class="btn btn-secondary col-12 mt-4" @onclick="Forgot">@Localizer["ForgotPassword"]</button>
 
-                    @if (_allowpasskeys)
+                    @if (_allowpasskeys && PageState.Route.Scheme == "https")
                     {
                         <hr class="app-rule mt-3" />
                         <button type="button" class="btn btn-primary col-12 mt-2" @onclick="Passkey">@Localizer["Passkey"]</button>