cakephp3- not able to fetch authorization header inside controller

Question

I am developing an API using CakePHP 3 framework. Now I'm sending a GET request from POSTMAN client. User will pass an API key in the header.

I wanna fetch this header in my controller function.

This is how my controller looks like

namespace Api\Controller;
use Cake\Auth\DefaultPasswordHasher;
use Api\Controller\AppController;
use Cake\Cache\Cache;
use Cake\Http\ServerRequest;

class ApiController extends AppController
{
    public function initialize()
    {
        parent::initialize();
        $this->loadComponent('RequestHandler');
    }

    public function myinfo()
    {
        if($this->request->is('get')) { 
            $key = $this->request->getHeaderLine('Authorization');
            $this->set('key', $key);
        }
        $this->set('_serialize', ['key']);          
    } 
}

The error that I'm getting is: HeaderLine is not a function

I also tried some more options:

$acceptHeader = $this->request->getHeader('Authorization');

but this also threw similar error. Header is not a function.

Reference: Link

CakePHP version: 3.3.5

Please always mention your _exact_ CakePHP version (last line in `vendor/cakephp/cakephp/VERSION.txt`) - thanks! — ndm, Apr 04 '17 at 11:42
Then you may want to have a closer look at the last example in the linked docs. — ndm, Apr 04 '17 at 11:49

score 3 · Accepted Answer · answered Apr 07 '17 at 06:20

3

As @ndm said in the OP comments, the last example in the linked doc should solve your problem. You are using a version prior to 3.4 so you have to use:

// Prior to 3.4.0
$key = $this->request->header('Authorization');

answered Apr 07 '17 at 06:20

chrisShick

1,096
8
21

Oh! Didn't notice that comment. – Smokey Apr 07 '17 at 06:37

score 2 · Answer 2 · edited May 23 '17 at 12:32

Refere document for Reading HTTP Header

Here mentioned that "Allows you to access any of the HTTP_* headers that were used for the request". Means it reads only http headers like

HTTP Request
Host
Connection
Upgrade-Insecure-Requests
User-Agent
Accept
Accept-Encoding
Accept-Language

Also mentioned that "While some apache installs don’t make the Authorization header accessible, CakePHP will make it available through apache specific methods as required."

So For Solution

They all have different obscure settings you can tweak to overrule this behaviour, but you'll need to determine exactly which module is to blame.

You can work around this issue by passing the header directly to PHP via the env:

SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1

Also Refere: Zend Server Windows - Authorization header is not passed to PHP script

cakephp3- not able to fetch authorization header inside controller

2 Answers2