Ticket #53658: 53658.3.diff

src/wp-admin/user-edit.php

@@ -733 +733 @@
 
         </table>
 
+<?php if ( wp_is_application_passwords_available_for_user( $user_id ) || ( ! is_ssl() || 'local' === wp_get_environment_type() ) ) : ?>
         <div class="application-passwords hide-if-no-js" id="application-passwords-section">
                 <h2><?php _e( 'Application Passwords' ); ?></h2>
                 <p><?php _e( 'Application passwords allow authentication via non-interactive systems, such as XML-RPC or the REST API, without providing your actual password. Application passwords can be easily revoked. They cannot be used for traditional logins to your website.' ); ?></p>
@@ -797 +798 @@
                         ?>
                 </div>
                 <?php else : ?>
-                        <p><?php _e( 'The application password feature requires HTTPS, which is not enabled on this site.' ); ?></p>
+                        <?php if ( ! is_ssl() ) : ?>
+                                <p><?php _e( 'The application password feature requires HTTPS, which is not enabled on this site.' ); ?></p>
+                        <?php endif; ?>
                         <p>
                                 <?php
                                 printf(
@@ -809 +812 @@
                         </p>
                 <?php endif; ?>
         </div>
+<?php endif; ?>
 
                 <?php
                 if ( IS_PROFILE_PAGE ) {