Open
Description
Description
In some situations, you may want to control the authentication process based on the origin of the request. For this purpose, the HTTP request header can be evaluated. This possibility is currently only provided by OTP Form which controls the display of the OTP Form.
Discussion
No response
Motivation
In order to control the authentication process outside the OTP form based on the origin of the request, a condition for checking the http request header is necessary.
Details
The implementation already exists in the OTP form and can be extracted there and converted into an independent condition.
A regex expression should be passed, which is then compared with the HTTP request header. Furthermore, it makes sense to enable an inversion of the request.