Local setup: ignore port (#1595)

* Require ext-apcu in composer.json

* Ignore port when verifying origin

* Ignore port when verifying origin

Author: stevenrombauts

composer.json

@@ -24,6 +24,7 @@
         "php": "^8.4",
         "ext-ctype": "*",
         "ext-iconv": "*",
+        "ext-apcu": "*",
         "algolia/algoliasearch-client-php": "^3.0",
         "babdev/pagerfanta-bundle": "^4.2",
         "beelab/recaptcha2-bundle": "^2.3",

src/EventListener/OriginListener.php

@@ -51,12 +51,16 @@ public function onRequest(RequestEvent $event): void
         }
 
         // valid origin
-        if ($event->getRequest()->headers->get('Origin') === 'https://'.$this->packagistHost) {
+        $origin = $event->getRequest()->headers->get('Origin') ?? '';
+        if ($origin === 'https://'.$this->packagistHost) {
             return;
         }
 
         // valid as well with HTTP in dev
-        if ('dev' === $this->environment && $event->getRequest()->headers->get('Origin') === 'http://'.$this->packagistHost) {
+        $scheme = parse_url($origin, PHP_URL_SCHEME);
+        $host = parse_url($origin, PHP_URL_HOST);
+        $knownOrigin = $scheme.'://'.$host;
+        if ('dev' === $this->environment && $knownOrigin === 'http://'.$this->packagistHost) {
             return;
         }