Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:95870
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.214.43 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <A957A0F4-9AC8-4DC0-809F-D7759C5A586A@koalephant.com>
References: <CAA69SC6szFdRLAhmPuWf2VJb2RyWH0L=-DoVFqrOo74qomwSXA@mail.gmail.com>
 <CANUQDChoKhUZsJE6Ja8PNEJd6mrBzMCD2T3JJ+LfoGbF8LvnGQ@mail.gmail.com>
 <CAA69SC4TxNkqdJG7882JovaAFsso-782Lfih58MhO=QOmCgy6Q@mail.gmail.com> <A957A0F4-9AC8-4DC0-809F-D7759C5A586A@koalephant.com>
Date: Fri, 9 Sep 2016 19:15:20 +0200
Message-ID: <CAA69SC61VO0C3AFeHMh-Q6qyXtMFho-GaA1EmSGg-Ho7WSM5og@mail.gmail.com>
To: Stephen Reay <php-lists@koalephant.com>
Cc: Niklas Keller <me@kelunik.com>, PHP Internals List <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=001a113d0f5a823a1e053c164acb
Subject: Re: [PHP-DEV] [PHPDEV] Bearer Auth
From: marijic.silvio@gmail.com (=?UTF-8?Q?Silvio_Mariji=C4=87?=)

--001a113d0f5a823a1e053c164acb
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

@Stephen

Yes, this change does not remove any previously variables in $_SERVER, only
adds PHP_AUTH_BEARER when present in request.

2016-09-09 18:07 GMT+02:00 Stephen Reay <php-lists@koalephant.com>:

> Does this change also leave the raw header in
> $_SERVER['HTTP_AUTHORIZATION=E2=80=99] ?
>
> > On 9 Sep 2016, at 21:30, Silvio Mariji=C4=87 <marijic.silvio@gmail.com>
> wrote:
> >
> > @Niklas
> > We are already supporting Basic and Digest and Bearer and MAC are used
> > widely as a form of token authorization.
> >
> > 2016-09-09 14:37 GMT+02:00 Niklas Keller <me@kelunik.com>:
> >
> >> 2016-09-09 14:17 GMT+02:00 Silvio Mariji=C4=87 <marijic.silvio@gmail.c=
om>:
> >>
> >>> Came across this issue https://bugs.php.net/bug.php?id=3D72915 and go=
t
> an
> >>> idea. I've added PHP_AUTH_BEARER to $_SERVER when Bearer auth token i=
s
> >>> used
> >>> as Authorization method.
> >>>
> >>> Does this kind of change requires RFC ? Would this kind of change be
> >>> usefull enough to go into the codebase ?
> >>>
> >>> Here are the changes I made:
> >>> https://github.com/php/php-src/compare/master...smarijic:
> php_auth_bearer
> >>>
> >>> Cheers,
> >>> Silvio.
> >>> --
> >>> Silvio Mariji=C4=87
> >>> Software Engineer
> >>> 2e Systems
> >>>
> >>
> >> I don't see why we should special case Bearer tokens.
> >>
> >> Regards, Niklas
> >>
> >
> >
> >
> > --
> > Silvio Mariji=C4=87
> > Software Engineer
> > 2e Systems
>
>


--=20
Silvio Mariji=C4=87
Software Engineer
2e Systems

--001a113d0f5a823a1e053c164acb--