I’m using Apache with mod_auth_kerb to perform HTTP authentication. How do I add custom headers to the 401 Authorization Required response generated by the auth module?
The relevant section of my Apache configuration is below. My custom header is being added after the Require valid-user check passes but is ignored on the initial request when the browser doesn’t send credentials and the server generates the 401 response.
AuthName “App Login”
Header always set X-My-Header my-value