Just a quick tip: If you’re building an (e.g., Django) application that:
- Relies on mod_wsgi, and
- Acts as an OAuth server, and
- Relies on the HTTP Authorization header to pass OAuth parameters,
then you need to ensure that you set the
WSGIPassAuthorization configuration directive to
On. If you don’t, then Apache will filter the Authorization header, and OAuth parameters will never reach your application.