RewriteEngine On # Pass the Authorization header (JWT Bearer) to PHP - Apache/PHP-FPM strips it otherwise RewriteCond %{HTTP:Authorization} . RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] RewriteCond %{REQUEST_FILENAME} !-f RewriteRule ^ index.php [L]