Authorization header missing since Core-update 5.6

  • Hi,

    after having updated to WP 5.6 the message “authorization header is missing” is shown for recommended site improvements.
    I asked both in WP forum and my hoster for advice to solve this issue. The latter told me it must be something about the theme.

    Can you please fix this?

    Would be great because I like Sela theme very much … ??

    Thanks in advance.

    Regards,
    Dinhac

    The page I need help with: [log in to see the link]

Viewing 8 replies - 1 through 8 (of 8 total)

  • Hi Dinhac,

    Sela was not updated for more than 2 years, so it’s possible that it may not work properly with the newest updates. I’d suggest you had a look at Stow, which is a child theme of Sela and created to work perfectly with blocks. You can download it from the bottom of this page:

    https://wordpress.com/theme/stow/.

    Thread Starter dinhac

    (@dinhac)

    Hi Fresatomica,

    thanks for your reply. I have just tested if the error would disappear by using Twenty Twenty-One theme on my website.
    Unfortunately, this didn’t fix the issue — the authorization header is still missing.
    So I’m afraid changing the theme is not the solution to the riddle …
    Especially since I need a theme which is GDPR compliant, without Google Fonts, I guess that’s not the case with Stow since it isn’t with Sela, is it?
    Because Stow is already a child theme building another child from it won’t work. Really a pity.

    Regards
    Dinhac

    Hello Dinhac,

    The authorization header is not a security header and is used for application logins (SSO for example.)

    Do you have any plugins that facilitate an API connection?

    I suspect at this point, this may be coming from a plugin rather than the theme.

    Many thanks in advance.

    Thread Starter dinhac

    (@dinhac)

    Hello Adam,

    thank you for your message. Tbh, I cannot say which of the plugins I have running on my website are facilitating API connection.

    How do I know or where can I check this?

    XML-RPC is disabled by the way.

    Regards,
    Dinhac

    Hi there,

    How do I know or where can I check this?

    Please disable your plugins one by one, and then check (after each one) to see if the “authorization header is missing” message is still shown. This will help you to narrow things down to the specific plugin is causing the message to be displayed

    If it is no longer shown it is related to the last plugin you deactivated. What is the name of the plugin that caused the issue? Thanks for the additional info!

    Moderator Jan Dembowski

    (@jdembowski)

    Forum Moderator and Brute Squad

    @dinhac Why did you report this topic? I have removed that flag from this topic.

    Thread Starter dinhac

    (@dinhac)

    @jdembowski I need help with removing the URL from my initial post.
    I think there is no advantage in sharing it regarding this topic but my site suffers from raised brute force attacks since I published the URL here.

    Scott

    (@midipedalboards)

    Make sure your running the FastCGI version of PHP. I had this issue running regular PHP 7.1.4 and found that PHP 7.1.4 FastCGI fixed the error.

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘Authorization header missing since Core-update 5.6’ is closed to new replies.