The Authorization Header is Missing

  • Resolved bulletproducts

    (@bulletproducts)


    5 years, 5 months ago

    I have the security headers set up in .htaccess as seen below and everything has been working fine. However I just upgraded WordPress today, and no I keep getting an error that the authorization header is missing. Any thoughts?

    # BEGIN rlrssslReallySimpleSSL rsssl_version[3.3.4]
    Header always set Strict-Transport-Security: “max-age=31536000” env=HTTPS
    Header always set Content-Security-Policy “upgrade-insecure-requests;”
    Header always set X-Content-Type-Options “nosniff”
    Header always set X-XSS-Protection “1; mode=block”
    Header always set Expect-CT “max-age=7776000, enforce”
    Header always set Referrer-Policy: “no-referrer-when-downgrade”
    Header always set X-Frame-Options “sameorigin”
    <IfModule mod_rewrite.c>
    RewriteEngine on
    RewriteCond %{HTTPS} !=on [NC]
    RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]
    </IfModule>
    # END rlrssslReallySimpleSSL

Viewing 1 replies (of 1 total)
  • Plugin Contributor Rogier Lankhorst

    (@rogierlankhorst)

    5 years, 5 months ago

    Hi @bulletproducts,

    The authorization header is not a security header like these others. It is used for application logins etc. Do you have an API connection which requires an authorization header? In that case, you can contact the service provider about this header.

Viewing 1 replies (of 1 total)

The topic ‘The Authorization Header is Missing’ is closed to new replies.