使用JWT丢失授权标头

Question

我正在尝试设置JSON Web令牌,以便从移动应用程序与我的php后端进行通信.我可以请求令牌就好了.当我需要验证它(或向另一个端点发出请求)时,我使用以下格式设置Authorization标头:

Bearer <token here>

但由于某些原因,在我的后端,$_SERVER['HTTP_AUTHORIZATION']没有设置.

我在使用Mamp Pro和PHP7的本地主机上.这是我的$_SERVER数组的转储:

Array
(
    [SERVER_SOFTWARE] => Apache
    [REQUEST_URI] => /wp-json/jwt-auth/v1/token/validate/
    [REDIRECT_STATUS] => 200
    [HTTP_HOST] => localhost.dev
    [CONTENT_TYPE] => application/x-www-form-urlencoded
    [CONTENT_LENGTH] => 54
    [HTTP_CONNECTION] => keep-alive
    [HTTP_ACCEPT] => */*
    [HTTP_USER_AGENT] => CocoaRestClient/15 CFNetwork/760.2.6 Darwin/15.3.0 (x86_64)
    [HTTP_ACCEPT_LANGUAGE] => en-us
    [HTTP_ACCEPT_ENCODING] => gzip, deflate
    [PATH] => /usr/bin:/bin:/usr/sbin:/sbin
    [SERVER_SIGNATURE] => 
    [SERVER_NAME] => cloud.iblue.eu
    [SERVER_ADDR] => ::1
    [SERVER_PORT] => 80
    [REMOTE_ADDR] => ::1
    [DOCUMENT_ROOT] => /Applications/MAMP/htdocs/dev
    [SERVER_ADMIN] => you@example.com
    [SCRIPT_FILENAME] => /Applications/MAMP/htdocs/dev/index.php
    [REMOTE_PORT] => 51804
    [REDIRECT_URL] => /wp-json/jwt-auth/v1/token/validate/
    [GATEWAY_INTERFACE] => CGI/1.1
    [SERVER_PROTOCOL] => HTTP/1.1
    [REQUEST_METHOD] => POST
    [QUERY_STRING] => 
    [SCRIPT_NAME] => /index.php
    [PHP_SELF] => /index.php
    [REQUEST_TIME_FLOAT] => 1459177711.33
    [REQUEST_TIME] => 1459177711
    [argv] => Array
        (
        )

    [argc] => 0
)

当我尝试使用HTTP基本身份验证Basic dGVzdEB0ZXN0LmNvbToxMjM0NQ==作为授权标头时,它工作正常:

[PHP_AUTH_USER] => test@test.com
[PHP_AUTH_PW] => 12345

有什么想法错了吗？

Answer 1

好的,我刚刚找到答案:https://devhacksandgoodies.wordpress.com/2014/06/27/apache-pass-authorization-header-to-phps-_serverhttp_authorization/

所以我将以下行添加到我的htaccess文件中,它解决了我的问题:

SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1