Store authorization header for type Bearer #17
Conversation
When "Basic" Authorization is provided, getHeadersFromServer() populates globals for use in verifying an OAuth client. When "Bearer" Authorization is provided, nothing is populated. This captures the authorization header when "Bearer" Authorization is provided, which can be used in verifying an access_token per http://tools.ietf.org/html/rfc6750#section-2.1
|
Looking into why this failed the PHP 5.4 test. |
|
The bearer token is already encoded as part of the Request header (do a var dump on the Request object when the The Bearer token is pulled from the request here. It does not need specific logic in the Request class. Is there an issue you have encountered you are trying to fix? if so please file an issue. Thanks! |
|
In case others encounter this same problem, the root cause of not being able retrieve the access_token from the header turned out to be a (missing) .htaccess entry: Without this only basic and digest authentication were getting parsed. More details: |
When "Basic" Authorization is provided, getHeadersFromServer() populates
globals for use in verifying an OAuth client. When "Bearer"
Authorization is provided, nothing is populated.
This captures the authorization header when "Bearer" Authorization is
provided, which can be used in verifying an access_token per
http://tools.ietf.org/html/rfc6750#section-2.1