Re: [PHPDEV] Bearer Auth
| From: | Stephen Reay | Date: | Fri, 09 Sep 2016 16:07:21 +0000 |
| Subject: | Re: [PHPDEV] Bearer Auth | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-95869@lists.php.net to get a copy of this message | ||
Does this change also leave the raw header in $_SERVER['HTTP_AUTHORIZATION’] ?
> On 9 Sep 2016, at 21:30, Silvio Marijić <marijic.silvio@gmail.com> wrote:
>
> @Niklas
> We are already supporting Basic and Digest and Bearer and MAC are used
> widely as a form of token authorization.
>
> 2016-09-09 14:37 GMT+02:00 Niklas Keller <me@kelunik.com>:
>
>> 2016-09-09 14:17 GMT+02:00 Silvio Marijić <marijic.silvio@gmail.com>:
>>
>>> Came across this issue
>>> https://bugs.php.net/bug.php?id=72915 and got an
>>> idea. I've added PHP_AUTH_BEARER to $_SERVER when Bearer auth token is
>>> used
>>> as Authorization method.
>>>
>>> Does this kind of change requires RFC ? Would this kind of change be
>>> usefull enough to go into the codebase ?
>>>
>>> Here are the changes I made:
>>>
>>> https://github.com/php/php-src/compare/master...smarijic:php_auth_bearer
>>>
>>> Cheers,
>>> Silvio.
>>> --
>>> Silvio Marijić
>>> Software Engineer
>>> 2e Systems
>>>
>>
>> I don't see why we should special case Bearer tokens.
>>
>> Regards, Niklas
>>
>
>
>
> --
> Silvio Marijić
> Software Engineer
> 2e Systems