Bug #72915 [Opn]: HTTP_AUTORIZATION header missing for Bearer Auth when using apache module

From: Date: Fri, 26 Aug 2016 07:17:36 +0000
Subject: Bug #72915 [Opn]: HTTP_AUTORIZATION header missing for Bearer Auth when using apache module
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-203555@lists.php.net to get a copy of this message 
Edit report at https://bugs.php.net/bug.php?id=72915&edit=1

 ID:                 72915
 User updated by:    cpuidle at gmx dot de
 Reported by:        cpuidle at gmx dot de
-Summary:            HTTP_AUTORIZATION header missing when php module is
                     used
+Summary:            HTTP_AUTORIZATION header missing for Bearer Auth
                     when using apache module
 Status:             Open
 Type:               Bug
 Package:            Apache2 related
 Operating System:   OSX
 PHP Version:        7.0.10
 Block user comment: N
 Private report:     N

 New Comment:

To be clear: the $_SERVER['HTTP_AUTHORIZATION'] variable is empty while
apache_request_headers() shows that the Authorization header is indeed present. 

It doesn't seem to get picked up by PHP, but why?


Previous Comments:
------------------------------------------------------------------------
[2016-08-21 21:02:53] cpuidle at gmx dot de

Description:
------------
echo $_SERVER['HTTP_AUTHORIZATION']

Test script:
---------------
curl --header "Authorization: Bearer
eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE0NzE4MDMwNjYsImV4cCI6MTQ3MTg4OTQ2Niwic3ViIjoidXNlciJ9.1JSvKan_gh5nV6wsLBbmZ0KrO9NKhHX7ktcmzxgtMHM"
http://localhost/test.php

Expected result:
----------------
Show authorization header

Actual result:
--------------
$_SERVER['HTTP_AUTHORIZATION'] not present


------------------------------------------------------------------------



--
Edit this bug report at https://bugs.php.net/bug.php?id=72915&edit=1

Thread (3 messages)

« previous php.bugs (#203555) next »