From b8733f31f9cbe440cad86e039606512f46d2e6f3 Mon Sep 17 00:00:00 2001
From: "Gan, Jimmy" <jimmy.gan@adidas.com>
Date: Sun, 22 Feb 2026 16:52:27 +0800
Subject: [PATCH] Fix passkey login on non-HTTPS connections

---
 dashboard/frontend/src/routes/Login.svelte | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dashboard/frontend/src/routes/Login.svelte b/dashboard/frontend/src/routes/Login.svelte
index 79f33d1..98ccf11 100644
--- a/dashboard/frontend/src/routes/Login.svelte
+++ b/dashboard/frontend/src/routes/Login.svelte
@@ -8,7 +8,7 @@
   let error = $state("");
   let loading = $state(false);
   let require2FA = $state(false);
-  let showPasswordForm = $state(false);
+  let showPasswordForm = $state(!window.isSecureContext);
 
   function base64urlToBuffer(b64) {
     const s = b64.replace(/-/g, '+').replace(/_/g, '/');