Search code examples
apacheauthorizationproxypass

Apache ProxyPass removes Authorization header

I have an Apache server setup as a reverse proxy in front of a some backend servers. One of the backend servers requires basic authentication but somehow Apache seems to remove the Authorization header from the request.

Do I have to configure something special in order to make Apache pass on the Authorization header to the backend server?

My Apache configuration is pretty basic. I only added some proxy directives like:

ProxyRequests Off
ProxyPass /backend-server https://backend.server

SSLProxyEngine on
Solution

  • It turns out that it's not Apache that removed the Authorization header, but some other firewall component in our network.

    We changed a setting in the firewall and now the ProxyPass directive above works just fine!