@freetommy mm, I assumed what you tried didn't work. It works for me.
I put the below in /app/data/.htaccess (placing this in /app/data/apache/app.conf inside VirtualHost also works:
SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
Restart the app. Then, I see the header passed on to PHP:
[HTTP_AUTHORIZATION] => Bearer YWxhZGRpbjpvcGVuc2VzYW1l
For future reference, this also worked (in apache config):
RewriteEngine On
RewriteCond %{HTTP:Authorization} ^(.*)
RewriteRule .* - [e=HTTP_AUTHORIZATION:%1]