Title: WP_REST_Server::get_headers
Published: December 9, 2015
Last modified: February 24, 2026

---

# WP_REST_Server::get_headers( array $server ): array

## In this article

 * [Parameters](https://developer.wordpress.org/reference/classes/wp_rest_server/get_headers/?output_format=md#parameters)
 * [Return](https://developer.wordpress.org/reference/classes/wp_rest_server/get_headers/?output_format=md#return)
 * [Source](https://developer.wordpress.org/reference/classes/wp_rest_server/get_headers/?output_format=md#source)
 * [Related](https://developer.wordpress.org/reference/classes/wp_rest_server/get_headers/?output_format=md#related)
 * [Changelog](https://developer.wordpress.org/reference/classes/wp_rest_server/get_headers/?output_format=md#changelog)

[ Back to top](https://developer.wordpress.org/reference/classes/wp_rest_server/get_headers/?output_format=md#wp--skip-link--target)

Extracts headers from a PHP-style $_SERVER array.

## 󠀁[Parameters](https://developer.wordpress.org/reference/classes/wp_rest_server/get_headers/?output_format=md#parameters)󠁿

 `$server`arrayrequired

Associative array similar to `$_SERVER`.

## 󠀁[Return](https://developer.wordpress.org/reference/classes/wp_rest_server/get_headers/?output_format=md#return)󠁿

 array Headers extracted from the input.

## 󠀁[Source](https://developer.wordpress.org/reference/classes/wp_rest_server/get_headers/?output_format=md#source)󠁿

    ```php
    public function get_headers( $server ) {
    	$headers = array();

    	// CONTENT_* headers are not prefixed with HTTP_.
    	$additional = array(
    		'CONTENT_LENGTH' => true,
    		'CONTENT_MD5'    => true,
    		'CONTENT_TYPE'   => true,
    	);

    	foreach ( $server as $key => $value ) {
    		if ( str_starts_with( $key, 'HTTP_' ) ) {
    			$headers[ substr( $key, 5 ) ] = $value;
    		} elseif ( 'REDIRECT_HTTP_AUTHORIZATION' === $key && empty( $server['HTTP_AUTHORIZATION'] ) ) {
    			/*
    			 * In some server configurations, the authorization header is passed in this alternate location.
    			 * Since it would not be passed in in both places we do not check for both headers and resolve.
    			 */
    			$headers['AUTHORIZATION'] = $value;
    		} elseif ( isset( $additional[ $key ] ) ) {
    			$headers[ $key ] = $value;
    		}
    	}

    	return $headers;
    }
    ```

[View all references](https://developer.wordpress.org/reference/files/wp-includes/rest-api/class-wp-rest-server.php/)
[View on Trac](https://core.trac.wordpress.org/browser/tags/6.9.4/src/wp-includes/rest-api/class-wp-rest-server.php#L1959)
[View on GitHub](https://github.com/WordPress/wordpress-develop/blob/6.9.4/src/wp-includes/rest-api/class-wp-rest-server.php#L1959-L1984)

## 󠀁[Related](https://developer.wordpress.org/reference/classes/wp_rest_server/get_headers/?output_format=md#related)󠁿

| Used by | Description | 
| [WP_REST_Server::serve_request()](https://developer.wordpress.org/reference/classes/wp_rest_server/serve_request/)`wp-includes/rest-api/class-wp-rest-server.php` |

Handles serving a REST API request.

  |

## 󠀁[Changelog](https://developer.wordpress.org/reference/classes/wp_rest_server/get_headers/?output_format=md#changelog)󠁿

| Version | Description | 
| [4.4.0](https://developer.wordpress.org/reference/since/4.4.0/) | Introduced. |

## User Contributed Notes

You must [log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fdeveloper.wordpress.org%2Freference%2Fclasses%2Fwp_rest_server%2Fget_headers%2F)
before being able to contribute a note or feedback.