The Authorization header is stripped by mod_proxy, this is documented behavior.
Simply add SetEnvIfNoCase ^Authorization$ "(.+)" HTTP_AUTHORIZATION=$1 to your config. With https://gist.github.com/progandy/6ed4eeea60f6277c3e39 (or Apache 2.4.10+) and 5.6.0RC2+, there are no more issues like double slashes or errors when rewriting to PATH_INFO (see PR link below). The "break" in question was caused by https://github.com/php/php-src/pull/694; it fixes the issue described therein. mod_fastcgi is old, crappy, unmaintained, deprecated stuff. You should use mod_proxy_fcgi with Apache 2.4. I'll try and see if I can figure out a way of fixing the original issue without causing the breakage described here. Either way, I'm not sure reverting this patch without a decision upstream is a good idea; this is a release candidate after all… David P.S. If you want to use UDS with mod_proxy_fcgi, do it like so: # make sure the proxy is registered with the unix socket; we can then use just "fcgi://php-fcgi" in rewrites # we have to do this because we can't rewrite to a UDS location; Apache will complain that no handler is loaded # this is also a lot more convenient for use in many config locations # http://thread.gmane.org/gmane.comp.apache.devel/52892 <Proxy "unix:/tmp/php-fpm.sock|fcgi://php-fpm"> # we must declare a parameter in here or it'll not register the proxy ahead of time ProxySet disablereuse=off </Proxy> <FilesMatch \.php$> SetHandler proxy:fcgi://php-fpm </FilesMatch> -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org