Bug #72915 [Com]: HTTP_AUTORIZATION header missing for Bearer Auth when using apache module
Edit report at https://bugs.php.net/bug.php?id=72915&edit=1
ID: 72915
Comment by: cpuidle at gmx dot de
Reported by: cpuidle at gmx dot de
Summary: HTTP_AUTORIZATION header missing for Bearer Auth
when using apache module
Status: Open
Type: Bug
Package: Apache2 related
Operating System: OSX
PHP Version: 7.0.10
Block user comment: N
Private report: N
New Comment:
Looking at https://github.com/php/php-src/blob/9fc0a5e049ade8082b2b9a45687ac8cbd694f731/main/main.c#L2615
it seems that PHP _only_ supports Basic and Digest authorization and nothing else.
Previous Comments:
------------------------------------------------------------------------
[2016-08-26 07:17:34] cpuidle at gmx dot de
To be clear: the $_SERVER['HTTP_AUTHORIZATION'] variable is empty while
apache_request_headers() shows that the Authorization header is indeed present.
It doesn't seem to get picked up by PHP, but why?
------------------------------------------------------------------------
[2016-08-21 21:02:53] cpuidle at gmx dot de
Description:
------------
echo $_SERVER['HTTP_AUTHORIZATION']
Test script:
---------------
curl --header "Authorization: Bearer
eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE0NzE4MDMwNjYsImV4cCI6MTQ3MTg4OTQ2Niwic3ViIjoidXNlciJ9.1JSvKan_gh5nV6wsLBbmZ0KrO9NKhHX7ktcmzxgtMHM"
http://localhost/test.php
Expected result:
----------------
Show authorization header
Actual result:
--------------
$_SERVER['HTTP_AUTHORIZATION'] not present
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=72915&edit=1
Thread (3 messages)