Authorization
Credentials for the request, most often a bearer token or Basic username and password.
Explained
Examples
Example
Authorization: Bearer eyJhbGciOiJIUzI1NiJ9…Watch out
Basic credentials are only Base64, not encrypted, so they need HTTPS. Browsers drop this header when a redirect goes to another origin.
Defined in RFC 9110 §11.6.2.