🔑

HTTP Authentication

Simple

Free preview · 2 of 4 steps

HTTP authentication: proving who you are

HTTP authentication answers: who is making this request? The standard mechanism is the Authorization header — the client sends credentials, the server validates them.

The WWW-Authenticate challenge-response pattern (401 → credentials → request) is the formal flow, but many APIs skip the challenge and just require credentials on every request.

Packets in motion — click to inspect:

1 / 2

Space to play/pause · ← → to step