[DX] Better apache authorization header "bug" handling about lexikjwtauthenticationbundle HOT 4 CLOSED

Another, even easier solution in many cases is to simply add CGIPassAuth on to .htaccess. See Apache docs and StackOverflow. Worked for me, although I'm not using this bundle so your mileage may vary

from lexikjwtauthenticationbundle.

Oops, just realized that the apache_request_headers function might only be available in a apache + mod_php configuration. I don't know if something similar is feasable in a apache + php-fpm context.

from lexikjwtauthenticationbundle.

I found this one : http://stackoverflow.com/questions/17018586/apache-2-4-php-fpm-and-authorization-headers
So seems you need to do some Env magic to get it working there.

Basically, i would say that updating your .htaccess in your own project dir seems fine enough. If you use a virtualhost without .htaccess, then you are capable enough to add this to your virtualhost config.

Adding the listener is a nice approach, but only helps on apache mod-php and i would not want it to run on all other servers. So maybe just add a link to that listener for another approach to the docs, but leave it to the developer to pick one of the approaches.

from lexikjwtauthenticationbundle.

I think you're right, I'll add your link to the doc for apache-fpm users.

from lexikjwtauthenticationbundle.