Define “necessary”. It is necessary if you want the browser to know what the type of the file is. PHP automatically sets the Content-Type header to text/html if you don’t override it so your browser is treating it as an HTML file that doesn’t contain any HTML. If your output contained any HTML you’d see … Read more
If you want to pass the variable to your proxy backend, you have to set it with the proxy module. location / { proxy_pass http://example.com; proxy_set_header Host example.com; proxy_set_header HTTP_Country-Code $geoip_country_code; proxy_pass_request_headers on; } And now it’s passed to the proxy backend.
I would probably use these settings: Cache-Control: max-age=31556926 – Representations may be cached by any cache. The cached representation is to be considered fresh for 1 year: To mark a response as “never expires,” an origin server sends an Expires date approximately one year from the time the response is sent. HTTP/1.1 servers SHOULD NOT … Read more
Actually, the accepted answer is not complete. Content-Range is not only used in responses. It is also legal in requests that provide an entity body. For example, an HTTP PUT provides an entity body, it might provide only a portion of an entity. Thus the PUT request can include a Content-Range header indicating to the … Read more
It depends on what you define as being required: there are no header fields that must be sent with every response no matter what the circumstances are, but there are header fields that you really should send. The only header field that comes close is Date, but even it has circumstances under which it is … Read more
As far as I know, Refresh (along with Set-Cookie and possibly some other proprietary pseudo-headers) were created by Netscape in the very early days of the internet and have been basically (but not quite) standard since then. Because just about every browser supports it, Refresh is pretty safe to use — and commonly is. I … Read more
Use: response.headers[‘HEADER NAME’] = ‘HEADER VALUE’ either in a specific method or to a before_filter method of your application controller depending on whether you need this to be added in a specific or to all of your responses. UPDATE for Rails 5 – February 24th, 2018 As noted by @BrentMatzelle in the comments, for Rails … Read more
You can create your own custom auth schemas that use the Authorization: header – for example, this is how OAuth works. As a general rule, if servers or proxies don’t understand the values of standard headers, they will leave them alone and ignore them. It is creating your own header keys that can often produce … Read more
I would partially disagree with Milan’s suggestion of embedding the requested representation in the URI. If anyhow possible, URIs should only be used for addressing resources and not for tunneling HTTP methods/verbs. Eventually, specific business action (edit, lock, etc.) could be embedded in the URI if create (POST) or update (PUT) alone do not serve … Read more
Instead of using CURLOPT_PUT = TRUE use CURLOPT_CUSTOMREQUEST = ‘PUT’ and CURLOPT_CUSTOMREQUEST = ‘DELETE’ then just set values with CURLOPT_POSTFIELDS.