Inklings: a tumblelog

Getting Apache, php-fpm, and in-app HTTP authentication working

Inside the vhost config for the site, include the following:

SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1

That way, the Authorization header will be passed through regardless of Apache’s usual filtering. Keep in mind that with this rule in place, you have to check for HTTP_AUTHORIZATION being empty too.