4 ms·
> an open-source application framework, was that hosting that used FastCGI, would not honor Auth headers So you were writing your application as a fcgi-app, an
by bch 5mo ago
> an open-source application framework, was that hosting that used FastCGI, would not honor Auth headers
So you were writing your application as a fcgi-app, and (e.g.) Apache was bungling Auth headers? Can you expand on this? Curious about the technical detail of (I guess) PARAM records not actually giving you what you expect?
- ChrisMarshallNY 5mo agoI don’t remember, exactly. Long time ago (I stepped away from that project many years ago). I just remember the auth headers never showing up in the $_SERVER global (it was a PHP app). This was what I was told was the issue. They made it sound like it was well-known.
- jorams 5mo agoThis is because of a deeply annoying default in Apache, where for "security reasons" the underlying script doesn't get to see auth details that might already be handled by Apache. At some point they added the CGIPassAuth directive[1] but all kinds of other workarounds are floating around on the internet. [1]: https://httpd.apache.org/docs/2.4/en/mod/core.html#cgipassauth https://httpd.apache.org/docs/2.4/en/mod/core.html#cgipassau...
- deleted 5mo ago[deleted]