Repository access tokens now work when the web server passes Basic Auth through HTTP_AUTHORIZATION, as PHP-FPM commonly does. Existing Apache-style authentication variables continue to work too.
HTTPS Git tokens authenticate reliably
Git over HTTPS now accepts access tokens through the server’s standard authorization header.