Check for REDIRECT_REMOTE_USER as well

2021-06-16 19:39:51 +00:00
parent 5e22704f7e
commit 6b3476409a
3 changed files with 14 additions and 3 deletions
--- a/src/Security/OAuth.php
+++ b/src/Security/OAuth.php
@@ -83,6 +83,11 @@ class OAuth
 	{
 		$authorization = $_SERVER['HTTP_AUTHORIZATION'] ?? '';

+		if (empty($authorization)) {
+			// workaround for HTTP-auth in CGI mode
+			$authorization = $_SERVER['REDIRECT_REMOTE_USER'] ?? '';
+		}
+
 		if (substr($authorization, 0, 7) != 'Bearer ') {
 			return [];
 		}