[stable34] fix: Use PHP_AUTH_PW for strict password confirmation

[backportbot]

Backport of #62477

For easier testing in the community, since master cannot be directly applied.

Warning, This backport's changes differ from the original and might be incomplete ⚠️

Todo

• Review and resolve any conflicts
• Review and verify the backported changes
• Amend HEAD commit to remove the line stating to skip CI

---

Learn more about backports at https://docs.nextcloud.com/server/stable/go.php?to=developer-backports.

[Volker-K]

Checked it quick and dirty in 33.0.3.2 and it fixed the problem.
Thank you.

[SystemKeeper]

/backport to stable33

[SystemKeeper]

/backport to stable32

[come-nc]

I dislike getting this though getHeader, it’s not a header per-se, is it?

It looks like the rest of the code uses $this->request->server['PHP_AUTH_USER'], which is ugly.
Would it make sense to have dedicated getters to get user and password from basic auth?

[SystemKeeper]

@come-nc I think that’s generally a good idea. I would even go one step further and remove the special key handling completely?

since this is breaking, we should do it starting with 35? The only tricky one I can see right now is

server/apps/settings/lib/SetupChecks/ForwardedForHeaders.php

Lines 41 to 42 in cbdff85

	$remoteAddress = $this->request->getHeader('REMOTE_ADDR');
	$detectedRemoteAddress = $this->request->getRemoteAddress();

to fix the linked issue, shall we therefore merge this?