ElyBy-Mirror/oauth2-server
1
0
Fork 0
mirror of https://github.com/elyby/oauth2-server.git synced 2024-11-02 00:43:11 +05:30
Code Issues Packages Projects Releases Wiki Activity

Support Authorization header passed as ENV var

Browse Source 
Some hosts (at this point I only know of Fortrabbit) require Authorization headers to be passed as an environment variable, which PHP will then shove into . See more: http://fortrabbit.com/docs/essentials/quirks-and-constraints\#authorization-header
This commit is contained in:
Phil Sturgeon 2014-02-26 17:27:56 -05:00
parent 8556f616d3
commit f83a9a7fa4
1 changed files with 11 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
src/League/OAuth2/Server/Resource.php
View File

@ -185,7 +185,7 @@ class Resource
$result = $this->storages['session']->validateAccessToken($accessToken); $result = $this->storages['session']->validateAccessToken($accessToken);
if ( ! $result) { if (! $result) {
throw new Exception\InvalidAccessTokenException('Access token is not valid'); throw new Exception\InvalidAccessTokenException('Access token is not valid');
} }
@ -227,7 +227,7 @@ class Resource
return false; return false;
} elseif (is_array($scopes)) { } elseif (is_array($scopes)) {
foreach ($scopes as $scope) { foreach ($scopes as $scope) {
if ( ! in_array($scope, $this->sessionScopes)) { if (! in_array($scope, $this->sessionScopes)) {
return false; return false;
} }
} }
@ -246,7 +246,15 @@ class Resource
*/ */
public function determineAccessToken($headersOnly = false) public function determineAccessToken($headersOnly = false)
{ {
if ($header = $this->getRequest()->header('Authorization')) { // Try to get it directly from a header
if (! $header = $this->getRequest()->header('Authorization')) {
// Failing that try getting it from a server variable
$header = $this->getRequest()->server('HTTP_AUTHORIZATION');
}
// One of them worked
if ($header) {
// Check for special case, because cURL sometimes does an // Check for special case, because cURL sometimes does an
// internal second request and doubles the authorization header, // internal second request and doubles the authorization header,
// which always resulted in an error. // which always resulted in an error.
@ -271,5 +279,4 @@ class Resource
return $accessToken; return $accessToken;
} }
} }