in reply to Re^3: Authorization HTTP header isn't coming through - why?
in thread Authorization HTTP header isn't coming through - why?

slap on the forehead... of course!

I've overseen this.. So I could summarize the lesson learned as:
the actual authentication ('Authorization' header) isn't accessible for the script, but once a user is logged in/authenticated, the 'Remote-User' header is set and this *is* part of the script's %ENV and thus accessible.
  • Comment on Re^4: Authorization HTTP header isn't coming through - why?

In Section Seekers of Perl Wisdom