Verifying Apache Configuration for apache_request_headers

The PHP function apache_request_headers() relies on Apache properly passing HTTP headers to the PHP environment. If it doesn't work, it's often due to Apache configuration issues. Here's how to verify and fix your Apache setup.

For the Authorization-specific case that triggers most of these verifications, see Fixing apache_request_headers Authorization Not Working — A System Administrator's Guide. For mod_headers reference, How to Install and Enable mod_headers in Apache and Understanding mod_headers in Apache.

Ensure the Apache Headers Module is Enabled

The mod_headers module must be enabled in Apache to pass and manipulate HTTP headers.

Check if mod_headers is Enabled

1. Run the following command:
   apachectl -M | grep headers
   • If you see headers_module (shared) in the output, the module is enabled.
   • If not, enable it.

Enable mod_headers

1. Enable the module:
   sudo a2enmod headers
2. Restart Apache:
   sudo systemctl restart apache2

Ensure Headers Are Passed to PHP

Some Apache configurations strip certain headers (like Authorization) before passing the request to PHP.

Check .htaccess Rules

If your application uses an .htaccess file, it might be stripping headers.

Add Header Rules to .htaccess

1. Open your .htaccess file in the root directory of your application.
2. Add the following:

   RewriteEngine On
   RewriteCond %{HTTP:Authorization} ^(.*)
   RewriteRule ^(.*) - [E=HTTP_AUTHORIZATION:%1]

3. Save the file.

Check for Proxy or Load Balancer Issues

If your Apache server is behind a reverse proxy or load balancer (e.g., NGINX, Cloudflare), the proxy might strip headers before passing them to Apache.

Fix for NGINX:

1. Open the NGINX configuration file (e.g., /etc/nginx/nginx.conf or site-specific config).
2. Add this directive to preserve the Authorization header:

   proxy_set_header Authorization $http_authorization;

3. Reload NGINX:
   sudo systemctl reload nginx

Linux VDS

High performance for your projects

• Root access and flexible setup
• Control panel
• NVMe disks
• DDR5

View pricing

Debug Apache Header Handling

To verify that Apache is correctly passing headers to PHP:

Test Header Passing

Use a tool like curl or Postman to send a request to your server and check the headers.

cURL Example:

curl -H "Authorization: Bearer YOUR_TOKEN" http://your-server.com/your-script.php

Debug in PHP:

Create a simple test script (headers.php) to see all the headers:

<?php
print_r(apache_request_headers());
?>

Checklist to Ensure Proper Apache Configuration

By verifying and fixing these aspects of Apache configuration, the apache_request_headers() function should work as expected.