Try both http and https in known user check

Author: malaqueueit

QueueIT.Security/src/queueit/security/KnownUserFactory.java

@@ -230,11 +230,14 @@ private static String getExpectedHash(String url)
 
     private static void validateHash(String requestUrl, String sharedEventKey, String expectedHash) {
         String stringToHash = requestUrl.substring(0, requestUrl.length() - 32) + sharedEventKey; //Remove hash value and add SharedEventKey
-        String actualHash = Hashing.getMd5Hash(stringToHash);
+        String actualHashHttp = Hashing.getMd5Hash(stringToHash.replaceFirst("^https://(.*)$", "http://$1"));
+        String actualHashHttps = Hashing.getMd5Hash(stringToHash.replaceFirst("^http://(.*)$", "https://$1"));
 
-        if (!actualHash.equals(expectedHash)) {
-            throw new InvalidKnownUserHashException();
+        if (actualHashHttp.equals(expectedHash) || actualHashHttps.equals(expectedHash)) {
+            return;
         }
+        
+        throw new InvalidKnownUserHashException();
     }
 
     private static void validateUrl(String url) {