MantisBT: master 9670defb

Diff Back to Repository
Author Committer Branch Timestamp Parent
dregad dregad master 2026-09-03 19:17 master 9ece70d4
Affected Issues  0035286: REST API: follow Standards for Authorization header
Changeset

Send HTTP Deprecation header if bearer scheme missing

If the REST API authentication is provided without the bearer scheme, an
RFC 9745 Deprecation header is sent, together with a link to the
Developer's Guide REST API Authentication chapter.

Adapt PHPUnit testBareTokenIsAccepted() to check for presence of
Deprecation header.

Fixes 0035286
mod - api/rest/restcore/AuthMiddleware.php Diff File
mod - core/constant_inc.php Diff File
mod - tests/rest/RestAuthHeaderTest.php Diff File