Fixing API authentication issue with Apache with PHP as cgi/fastCGI (#42593)

Hackwar · web-flow · commit 8bd67859ba6e · 2024-05-17T18:45:18.000+02:00
diff --git a/plugins/api-authentication/token/src/Extension/Token.php b/plugins/api-authentication/token/src/Extension/Token.php
@@ -113,6 +113,11 @@ public function onUserAuthenticate($credentials, $options, &$response): void
             }
         }
 
+        // Another Apache specific fix. See https://github.com/symfony/symfony/issues/1813
+        if (empty($authHeader)) {
+            $authHeader  = $this->getApplication()->getInput()->server->get('REDIRECT_HTTP_AUTHORIZATION', '', 'string');
+        }
+
         if (substr($authHeader, 0, 7) == 'Bearer ') {
             $parts       = explode(' ', $authHeader, 2);
             $tokenString = trim($parts[1]);

Original file line number	Diff line number	Diff line change
`@@ -113,6 +113,11 @@ public function onUserAuthenticate($credentials, $options, &$response): void`
`113`	`113`	`}`
`114`	`114`	`}`
`115`	`115`
	`116`	`+ // Another Apache specific fix. See https://github.com/symfony/symfony/issues/1813`
	`117`	`+ if (empty($authHeader)) {`
	`118`	`+ $authHeader = $this->getApplication()->getInput()->server->get('REDIRECT_HTTP_AUTHORIZATION', '', 'string');`
	`119`	`+ }`
	`120`	`+`
`116`	`121`	`if (substr($authHeader, 0, 7) == 'Bearer ') {`
`117`	`122`	`$parts = explode(' ', $authHeader, 2);`
`118`	`123`	`$tokenString = trim($parts[1]);`