aboutsummaryrefslogtreecommitdiffstats
path: root/Zotlabs
diff options
context:
space:
mode:
authorMario <mario@mariovavti.com>2025-03-18 07:52:39 +0000
committerMario <mario@mariovavti.com>2025-03-18 07:52:39 +0000
commit5188b9cef5053dc22e3b749c841a1f2e46360296 (patch)
treeaaa5af4c0ea5122589a8998991ecc0de85912ba2 /Zotlabs
parent8c0b7ce4deef60d9a57fc9ee1670910bf432ad53 (diff)
downloadvolse-hubzilla-5188b9cef5053dc22e3b749c841a1f2e46360296.tar.gz
volse-hubzilla-5188b9cef5053dc22e3b749c841a1f2e46360296.tar.bz2
volse-hubzilla-5188b9cef5053dc22e3b749c841a1f2e46360296.zip
we require the HTTP signature to be set in the HTTP_AUTHORIZATION field somewhere down the line (probably in Web/HTTPSig). Make sure it is there.
Diffstat (limited to 'Zotlabs')
-rw-r--r--Zotlabs/Module/Owa.php2
1 files changed, 2 insertions, 0 deletions
diff --git a/Zotlabs/Module/Owa.php b/Zotlabs/Module/Owa.php
index 21082e166..254b1c7d1 100644
--- a/Zotlabs/Module/Owa.php
+++ b/Zotlabs/Module/Owa.php
@@ -27,6 +27,8 @@ class Owa extends Controller {
$this->error('Missing or invalid authorization header.');
}
+ $_SERVER['HTTP_AUTHORIZATION'] = $_SERVER['HTTP_AUTHORIZATION'] ?? $_SERVER['REDIRECT_REMOTE_USER'];
+
$sigblock = HTTPSig::parse_sigheader($_SERVER['HTTP_AUTHORIZATION']);
if ($sigblock) {
$keyId = $sigblock['keyId'];