Merge pull request #100 from digitaloperative/feature/apache-fpm-auth-headers

Fix for how auth is rewritten in Apache + PHP FPM

Merge pull request #100 from digitaloperative/feature/apache-fpm-auth-headers
Fix for how auth is rewritten in Apache + PHP FPM
cc34fadb · Rik ter Beek · GitHub · 8c63fe7d · 93653cf5 · cc34fadb
Commit cc34fadb authored Mar 29, 2017 by Rik ter Beek Committed by GitHub Mar 29, 2017
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

Controller/Process/Json.php Controller/Process/Json.php +3 -0

No files found.
--- a/Controller/Process/Json.php
+++ b/Controller/Process/Json.php
@@ -301,6 +301,9 @@ class Json extends \Magento\Framework\App\Action\Action
            $_SERVER['REDIRECT_REMOTE_AUTHORIZATION'] != '') {
            list($_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW']) =
                explode(':', base64_decode($_SERVER['REDIRECT_REMOTE_AUTHORIZATION']));
+        } elseif (!empty($_SERVER['REDIRECT_HTTP_AUTHORIZATION'])) {
+            list($_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW']) =
+                explode(':', base64_decode(substr($_SERVER['REDIRECT_HTTP_AUTHORIZATION'], 6)));
        } elseif (!empty($_SERVER['HTTP_AUTHORIZATION'])) {
            list($_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW']) =
                explode(':', base64_decode(substr($_SERVER['HTTP_AUTHORIZATION'], 6)));