only add host header on localhost

- adds isLocalHost method to WbstackMagnusOauth

Author: toban

public_html/php/WbstackMagnusOauth.php

@@ -158,6 +158,10 @@ public static function getOauthParams(
         return $params;
     }
 
+    public static function isLocalHost(): bool {
+        return substr($_SERVER['SERVER_NAME'], -10, 10) === '.localhost';
+    }
+
     /**
      * @param string $toolUrlTail Example: "/tools/widar"
      * @return mixed
@@ -167,7 +171,7 @@ public static function getSite(
     ) {
         // XXX: this same logic is in quickstatements.php and platform api WikiController backend
         $domain = $_SERVER['SERVER_NAME'];
-        if ( substr($domain,-10, 10) === '.localhost' ){
+        if ( self::isLocalHost() ){
 
             // localhost development, with a full domain prefixing .localhost
             // eg. wiki.addshore.com.localhost
@@ -186,10 +190,10 @@ public static function getSite(
             $toolRoot = $domain . $toolUrlTail;
 
             // Directly for config
-            $publicMwOAuthUrl = 'https://' . $wbRoot . '/w/index.php?title=Special:OAuth';
+            $publicMwOAuthUrl = 'https://' . $wbRoot . '/w/index.php?title=Special:OAuth'; // TODO this could use the internal network
             $mwOAuthUrl = 'https://' . $wbRoot . '/w/index.php?title=Special:OAuth';
             $wbPublicHostAndPort = $wbRoot;
-            $wbApi = 'https://' . $wbRoot . '/w/api.php';
+            $wbApi = 'https://' . $wbRoot . '/w/api.php'; // TODO this could use the internal network
             $wbPageBase = 'https://' . $wbRoot . '/wiki/';
             $toolbase = 'https://' . $toolRoot;
         }

public_html/php/oauth.php

@@ -249,9 +249,15 @@ function sign_request( $method, $url, $params = [] ) {
 	 *
 	 */
 	function setCurlHttpHeaders( $curlHandle, $headers = [] ) {
-		$domain = $_SERVER['SERVER_NAME'];
-		$headers[] = 'HOST: ' . $domain;
-		curl_setopt( $curlHandle, CURLOPT_HTTPHEADER, $headers );
+
+		if( WbstackMagnusOauth::isLocalHost() ) {
+			$domain = $_SERVER['SERVER_NAME'];
+			$headers[] = 'HOST: ' . $domain;
+		}
+	
+		if( !empty($headers) ) {
+			curl_setopt( $curlHandle, CURLOPT_HTTPHEADER, $headers );
+		}
 	}
 
 	/**