Apache docker image used in CI strips Authorization header
Open, Needs TriagePublic
Actions

Assigned To

None

Authored By

	Jakob_WMDE
	Apr 8 2022, 3:32 PM

Description

Same as T305143, but for the image used in the mediawiki-quibble-apitests-vendor-php72-docker CI job. We (Wikibase Reuse Team) tried writing an api integration test using an OAuth2 bearer token and discovered that the Authorization header gets stripped from the request and does not reach the PHP process.

Related Objects

Mentioned Here: T294780: Extension:OAuth not working in MediaWiki-Docker because Authorization headers are being stripped
T305143: Apache docker image strips Authorization header

Event Timeline

Jakob_WMDE created this task.Apr 8 2022, 3:32 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptApr 8 2022, 3:32 PM

Ollie.Shotton_WMDE subscribed.Apr 11 2022, 9:05 AM

Silvan_WMDE subscribed.Apr 11 2022, 9:14 AM

thcipriani edited projects, added Continuous-Integration-Config, Release-Engineering-Team (Priority Backlog 📥); removed Release-Engineering-Team.Apr 13 2022, 4:32 PM

Adding "CGIPassAuth On" to the Apache config should take care of this. The solution in T305143 will also work but the CGIPassAuth setting is easier to understand.

T294780 is another hit for the same kind of problem.

Apache docker image used in CI strips Authorization headerOpen, Needs TriagePublicActions

Description

Related Objects

Event Timeline

Apache docker image used in CI strips Authorization header
Open, Needs TriagePublic
Actions