indieweb / indieweb/wordpress-indieauth
"Authorization Test Failed" for "Indie Auth"
- Dominant language
- PHP
- Stars
- 36
- Forks
- 14
- Avg merge
- 2h 6m
- Merged PRs (30d)
- 3
Description
Sorry if this is a multiple sending of an issue, first tries weren't unsuccessful.
I have received following messages on the "IndieAuth Settings" page
> Warning: Attempt to read property "message" on null in [SNIP]//wp-content/plugins/indieauth/includes/class-indieauth-admin.php on line 211
as well as
> Some host configurations can block the ability of this site to work and may require change. Please run the Site Health check to ensure this will work with your site.
On Site Health, I have the same warning as well as an
>"Authorization Test Failed" for "Indie Auth"
as well as the infamous message;
> Authorization has Failed
>
> The authorization header was not returned on this test, which means that your server may be stripping the Authorization header. This is needed for IndieAuth to work correctly.
>
> If you are on Apache, try adding this line to your .htaccess file:
>
> SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
>
> If that doesnt work, try this:
>
> RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
>
> If that does not work either, you may need to ask your hosting provider to reconfigure to allow the Authorization header to be passed. If they refuse, you can pass it through Apache with an alternate name. The plugin searches for the header in REDIRECT_HTTP_AUTHORIZATION, as some FastCGI implementations store the header in this location.
> [If contacting your hosting provider does not work you can open an issue on GitHub and we will try to assist](https://github.com/indieweb/wordpress-indieauth/issues)
>
1. I have tested both lines in the .htaccess, to no avail.
2. I have contacted my hosting provider and they have told me that the "header authorization" is accessible,
I have not found an to my issue answer to my issue in the Issue List,
Wordpress 6.1.1, all plugin updated
IndieAuth 4.2.1
Thank you for your support,
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with includes/class-indieauth-admin.php around line 211 and trace the IndieAuth Settings warning, then inspect the Site Health authorization test and how the Authorization header is detected. Reproduce the failure with the reported WordPress and IndieAuth versions; done means the warning is handled and the authorization test accurately reports whether the header is available.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php, wordpress
- Domain
- authentication, backend
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100