Header & footer don't work with basic auth + mod_headers

[viranch]

I came across a weird issue that causes the server to stop listing files altogether, here's my setup:

• Server at http://localhost
• Directory root at /var/www/html, apaxy setup under that directory (/var/www/html/theme for reference)

<Directory /var/www/html>
    Options Indexes FollowSymLinks MultiViews
    AllowOverride All
    Order allow,deny
    allow from all
</Directory>

• http://localhost/resources <-- directory to list
• http://localhost/backend <-- reverse proxy to my backend app

<IfModule mod_headers.c>
RequestHeader unset Authorization
</IfModule>
ProxyRequests Off
ProxyPass /backend http://127.0.0.1:3000
ProxyPassReverse /backend http://127.0.0.1:3000

• I want everything under http://localhost/* to be protected by basic auth, including access to /backend

<Location />
    AuthType Basic
    AuthName "By Invitation Only"
    AuthUserFile /etc/apache2/htpasswd
    Require valid-user
</Location>

• Authorization header should not pass on to backend, done by RequestHeader unset Authorization (requires mod_headers)
• I don't have control over the backend app and contents of /resources

With this setup and config pieces, style.css gets applied but there's no content in the table that's supposed to list the directory, neither does header/footer.html show up in response HTML.

This problem goes away if I remove basic auth, or if I disable mod_headers. I can't figure out how those might HeaderName & ReadmeName. Not sure if its an issue with this theme or my config.

[AdamWhitcroft]

@viranch I'll be 100% honest here and say this is way out of my league of understanding. I'm really sorry, but I have no idea.

[viranch]

@AdamWhitcroft no worries this is a very specific use case that probably nobody is ever going to hit.

If anybody stumbles here, I worked around this issue by changing mod_headers block to:

<Location /backend>
    RequestHeader unset Authorization
</Location>

Thanks anyway for the awesome theme @AdamWhitcroft !