OXDEV-8525 Spike authorization from cookies

Author: hkreuter

src/Framework/RequestReader.php

@@ -14,6 +14,7 @@
 use Laminas\Diactoros\ServerRequestFactory;
 use Lcobucci\JWT\Configuration;
 use Lcobucci\JWT\UnencryptedToken;
+use OxidEsales\EshopCommunity\Core\Registry;
 use OxidEsales\GraphQL\Base\Exception\UnableToParseToken;
 use OxidEsales\GraphQL\Base\Service\JwtConfigurationBuilder;
 use OxidEsales\GraphQL\Base\Service\TokenValidator;
@@ -145,6 +146,10 @@ private function getAuthorizationHeader(): ?string
             return $value;
         }
 
+        if ($authCookie = $this->getAuthCookie()) {
+            return 'Bearer ' . $authCookie;
+        }
+
         if (function_exists('apache_request_headers')) {
             $headers = apache_request_headers();
 
@@ -160,6 +165,11 @@ private function getAuthorizationHeader(): ?string
         return null;
     }
 
+    private function getAuthCookie(): ?string
+    {
+        return (string) Registry::getUtilsServer()->getOxCookie('oxapi_jwt');
+    }
+
     private function getRegularHeaderValue(): ?string
     {
         if (isset($_SERVER['HTTP_AUTHORIZATION'])) {