Skip to content

Support parsing HTTP_AUTHORIZATION header in case of mod_wsgi deployment #77

Open
@frankdu

Description

@frankdu

Class method Request.from_request() checks 'Authorization' HTTP header for OAuth parameters. However, if you deploy web app with mod_wsgi, 2 important things happen:

  1. By default, Authorization header is dropped, and you need to use 'WSGIPassAuthorization On' to pass it to your web app codes, for example python/django codes.
  2. Authorization header is renamed to HTTP_AUTHORIZATION on passing mod_wsgi.

Therefore, to support this case on the server side, the class method Request.from_request() needs to look at HTTP_AUTHORIZATION header as well. It important for implementing OAuth provider services.

The fix is at https://github.com/frankdu/python-oauth2/tree/mod_wsgi_patch. Please check if it good for moving its ass to the master branch.

For more information, please refer to the links below. If anything supplemental is needed, please let me know.

Best Regards,
Du

Links:

  1. Branch
    https://github.com/frankdu/python-oauth2/tree/mod_wsgi_patch
  2. Explanation Article
    http://www.frankdu.com/notes/2011/07/10/deploy-oauth-provider-with-mod_wsgi/
  3. mod_wsgi: Access Control Mechanisms
    http://code.google.com/p/modwsgi/wiki/AccessControlMechanisms
  4. WSGIPassAuthorization Directive
    http://code.google.com/p/modwsgi/wiki/ConfigurationDirectives#WSGIPassAuthorization

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions