amadanmath
commented
6 years ago Derptiderp, forgot to tell Apache not to be an idiot. For posterity,
WSGIPassAuthorization Onor it will helpfully strip the auth header "for security" before handing the request to the app.
New API doesn't seem to recognise Authorization token in header, keep getting
{"detail":"Authentication credentials were not provided."}