fix: Use PHP_AUTH_PW for strict password confirmation

[SystemKeeper]

• Resolves: [Bug]: Creating and deleting App Tokens runs into error #62190

Summary

We already make sure that AUTHORIZATION headers are copied to PHP_AUTH_USER and PHP_AUTH_PW, so these should work in all cases.

server/lib/OC.php

Lines 1297 to 1318 in 3541356

	protected static function handleAuthHeaders(): void {
	//copy http auth headers for apache+php-fcgid work around
	if (isset($_SERVER['HTTP_XAUTHORIZATION']) && !isset($_SERVER['HTTP_AUTHORIZATION'])) {
	$_SERVER['HTTP_AUTHORIZATION'] = $_SERVER['HTTP_XAUTHORIZATION'];
	}
	// Extract PHP_AUTH_USER/PHP_AUTH_PW from other headers if necessary.
	$vars = [
	'HTTP_AUTHORIZATION', // apache+php-cgi work around
	'REDIRECT_HTTP_AUTHORIZATION', // apache+php-cgi alternative
	];
	foreach ($vars as $var) {
	if (isset($_SERVER[$var]) && is_string($_SERVER[$var]) && preg_match('/Basic\s+(.*)$/i', $_SERVER[$var], $matches)) {
	$credentials = explode(':', base64_decode($matches[1]), 2);
	if (count($credentials) === 2) {
	$_SERVER['PHP_AUTH_USER'] = $credentials[0];
	$_SERVER['PHP_AUTH_PW'] = $credentials[1];
	break;
	}
	}
	}
	}

Please check if there's any reason to access the raw authorization header in that method, in that case we could use the PHP_AUTH_* ones as fallback.

Checklist

• Code is properly formatted
• Sign-off message is added to all commits
• Tests (unit, integration, api and/or acceptance) are included
• Screenshots before/after for front-end changes
• Documentation (manuals or wiki) has been updated or is not required
• Backports requested where applicable (ex: critical bugfixes)
• Labels added where applicable (ex: bug/enhancement, 3. to review, feature component)
• Milestone added for target branch/version (ex: 32.x for stable32)

AI (if applicable)

• The content of this PR was partly or fully generated using AI

[SystemKeeper]

/backport! to stable34

[provokateurin]

Can be simplified to just call the method without a catch and assertion.

[SystemKeeper]

I was just following the schema that is used in the file already.

[susnux]

makes sense!