# HTTP integration

**URL:** <https://www.thethingsnetwork.org/forum/t/http-integration/5271>\
**Category:** Uncategorized\
**Created:** [February 7, 2017, 10:17am UTC](https://www.thethingsnetwork.org/forum/t/http-integration/5271 "2017-02-07T10:17:49Z")\
**Posts on this page:** 1\
**Showing post:** 28

<div class="post-metadata">

**Author:** ![arjanvanb](https://www.thethingsnetwork.org/forum/user_avatar/www.thethingsnetwork.org/arjanvanb/32/46626_2.png) [@arjanvanb](https://www.thethingsnetwork.org/forum/u/arjanvanb)\
**Post date:** [September 4, 2017, 5:29pm UTC](https://www.thethingsnetwork.org/forum/t/http-integration/5271/28 "2017-09-04T17:29:02Z")

</div>

> [@rmeldo](#):
>
> using the  
> Authorization: dummy\_auth and additional optional key:  
> add-Key: dummy\_key

The `Authorization` header not being visible [might be a known issue](http://php.net/manual/en/features.http-auth.php) on some servers, if the server only supports Basic/Digest authorization, or is strict about the `Authorization: <type> <credentials>` header format:

> In order to get HTTP Authentication to work using IIS server with the CGI version of PHP you must edit your IIS configuration “_Directory Security_”. Click on “_Edit_” and only check “_Anonymous Access_”, all other fields should be left unchecked.

…and:

> Workaround for missing `Authorization` header under CGI/FastCGI Apache:

> ```
> SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
> 
> ```

> Now PHP should automatically declare `$_SERVER[PHP_AUTH_*]` variables if the client sends the `Authorization` header.

(It’s an old reference and I’ve not read any of the other comments.)

Also, [on Stack Overflow Mun Mun Das writes](https://stackoverflow.com/questions/11990388/request-headers-bag-is-missing-authorization-header-in-symfony-2/11992664#11992664):

> Authorization header […] is discarded by apache if not in valid format. Try using another name.

…to which Mika Tuupola responded:

> AFAIK Apache will accept any format Authorization header. It is PHP which discards anything else than valid Basic or Digest header.

Either way, surely “`dummy_auth`” is not a valid value as it does not follow the syntax `Authorization: <type> <credentials>`, [such as `Authorization: Basic QWxhZGRpbjpPcGVuU2VzYW1l `](https://en.wikipedia.org/wiki/Basic_access_authentication#Client_side).

All this would not explain why `add-Key` would be missing, if you’ve indeed configured that too.

(@rmeldo, meanwhile I understand that nowadays the HTTP Integration supports setting an `Authorization` header or custom header, which [it did not support](https://www.thethingsnetwork.org/forum/uploads/default/original/2X/d/dc9e180ff20d5f26a71681315715f07255357539.jpg) in its initial release. I’ve edited my earlier answers for future readers.)

---

_[View the full topic](https://www.thethingsnetwork.org/forum/t/http-integration/5271)._