Question Empty Authorization header on PHP with nginx

[nicojmb]

Hi,

I'm developing a PHP RestAPI server with JWT and Bearer Auth.

In my client side (postman) send the header authorization but in PHP the variable $_SERVER['HTTP_AUTHORIZATION'] is empty.

Here is my plesk configuration is (details in attaached images):

• Hosting Settings: PHP 7.4.11 - FPM served by nginx

¿How get this headers with nginx in my php code?

 

[Bitpalast]

I think that in this case you need to add two directives to Nginx like

proxy_set_header Authorization $http_authorization;
proxy_pass_header Authorization;

I have not tested this, but think this should work in the "Directivas adicionales de nginx" field.

 

[nicojmb]

I think that in this case you need to add two directives to Nginx like

proxy_set_header Authorization $http_authorization;
proxy_pass_header Authorization;

I have not tested this, but think this should work in the "Directivas adicionales de nginx" field.

Hi, added this directives but do not work, the $_SERVER['HTTP_AUTHORIZATION'] still empty.

 

[Bitpalast]

Maybe the guess at Nginx as a source of trouble wasn't right. There can be more issues, like the one described here:

How to pass authentication headers in PHP on a Fast-CGI enabled server - xneelo Help Centre

When using Fast-CGI to pass authentication headers, these headers are ignored by PHP. The following steps can be used to overcome this problem.

xneelo.co.za

 

[nicojmb]

Hi, i don´t know whay, but if i add this apache directive works:

SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1

i thought apache parameters are not used when nginx proxy is enabled

 

[Bitpalast]

Nginx "proxy" means that Nginx serves static files while it forwards all other requests to Apache. .htaccess and other Apache settings are used by Apache as always, just not on static files that are served by Nginx.

 

[CrazyWoMan]

Hi, i don´t know whay, but if i add this apache directive works:

SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1

i thought apache parameters are not used when nginx proxy is enabled

Hi nicojmb,
Could you explain more details about the steps about how you did it?
Did you follow this?

How to add domain specific Apache or nginx directives to web server configuration file on Plesk for Linux

Applicable to: Plesk for Linux Question How to add domain directives (settings) Apache or Nginx directives to web server configuration file on Plesk for Linux? Answer To add domain-specific sett...

support.plesk.com

 

[nicojmb]

Hi nicojmb,
Could you explain more details about the steps about how you did it?
Did you follow this?

How to add domain specific Apache or nginx directives to web server configuration file on Plesk for Linux

Applicable to: Plesk for Linux Question How to add domain directives (settings) Apache or Nginx directives to web server configuration file on Plesk for Linux? Answer To add domain-specific sett...

support.plesk.com

Hi,

Add at top of .htaccess this line:

SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1

 

[CrazyWoMan]

Thanks nicojmb!!
You did a test with GET method.
Is your test working with POST method?
I have an issue with POST requests using nginx/apache/wordpress/plugin "JWT Authentication for WP REST API"
It is not clear where is the problem but this issue is common
More info about this:

Using the WordPress REST API with JWT Authentication – firxworx

firxworx.com