Zegnatskippy’s Micropub implementation is using getallheaders(), which Apache does give Authorization to. The Micropub implementation then send this header along to the token endpoint, but my token endpoint uses $_SERVER['HTTP_AUTHORIZATION'], and Apache does not give it to $_SERVER.
