RewriteEngine On
SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
# Forzar que Authorization se pase a PHP
RewriteCond %{HTTP:Authorization} ^(.*)
RewriteRule .* - [E=HTTP_AUTHORIZATION:%1]
RewriteEngine On
RewriteCond %{HTTP_HOST} ^otisawin\.com [NC]
RewriteRule ^(.*)$ https://www.otisawin.com/$1 [L,R=301]
# CORS (opcional, para desarrollo)
<IfModule mod_headers.c>
    Header always set Access-Control-Allow-Origin "*"
    Header always set Access-Control-Allow-Headers "Authorization, Content-Type"
    Header always set Access-Control-Allow-Methods "GET, POST, OPTIONS"
</IfModule>

# Manejar OPTIONS correctamente (CORS)
<IfModule mod_rewrite.c>
    RewriteCond %{REQUEST_METHOD} OPTIONS
    RewriteRule ^(.*)$ $1 [L]
</IfModule>

# Permitir acceso a login.php
<Files "login.php">
    Require all granted
</Files>