From 3c4b579a22d0936269bb2660c5b9521492d96d86 Mon Sep 17 00:00:00 2001
From: Dominique Hazael-Massieux <dom@w3.org>
Date: Fri, 18 Jun 2021 11:54:40 +0200
Subject: [PATCH] Alert if run in a non-secure context

Inspired by https://stackoverflow.com/questions/68030727/webauthn-example-indicates-browser-is-not-supported-when-cross-compiled-but-work
---
 index.html | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/index.html b/index.html
index 9d24ad0..67aafce 100644
--- a/index.html
+++ b/index.html
@@ -20,7 +20,10 @@
   <script>
 
     $(document).ready(function () {
-
+      if (!window.isSecureContext) {
+        alert("Error: WebAuthentication is only available in a secure context (localhost or https://)");
+        return;
+      }
       // check whether current browser supports WebAuthn
       if (!window.PublicKeyCredential) {
         alert("Error: this browser does not support WebAuthn");
@@ -167,4 +170,4 @@
   </script>
 </body>
 
-</html>
\ No newline at end of file
+</html>