Access HTTP authentication username in PHP?

Question

Is it possible in PHP to access the login name of a user authenticated with server's native HTTP digest authentication (as starkly opposed to a PHP implementation of the same HTTP authentication protocol)?

Community · Accepted Answer · 2021-10-07 11:06:08Z

1

The data you are after is provided in the HTTP header sent from the client (as per https://www.rfc-editor.org/rfc/rfc2617 ), namely the header Authorization.

In PHP this header can be retrieved like so:

$header = $_SERVER['HTTP_AUTHORIZATION'];

The header contains a number of key value pairs separated by commas. The username is in the username key, you can extract this by something like:

preg_match('/username="([^"]+)"/', $header, $matches);
$username = $matches[1];

edited Oct 7, 2021 at 11:06

CommunityBot

11 silver badge

answered Sep 25, 2015 at 13:21

Eborbob

1,9851 gold badge17 silver badges31 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Szczepan Hołyszewski Over a year ago

Thanks, I figured it out in the meantime (accepting still). The confounding factor was that I mistakenly believed the digest auth to have been set up for the document root while it was only set up for a subdir. The component I was working on, residing in another subdir, obviously did not get the Authorization header.

Collectives™ on Stack Overflow

Access HTTP authentication username in PHP?

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related