HTTP Authorization header
The HTTP Authorization header is a request header that carries credentials or other authentication or authorization information for accessing a resource.
Building Web APIs with ASP.NET Core
The Authorization header is an HTTP request header that carries credentials or authentication information for the requested resource.
- How it is used
- Attaches bearer tokens to REST API requests and supports authorization checks without server-side sessions.
- How deep it goes
- Explains bearer-token use and SwaggerUI configuration, but stops short of interceptor implementation and server-side token validation.
- Examples
- Uses a login-returned JWT, SwaggerUI’s Authorize dialog, and a Program.cs security definition as concrete artifacts.
- What you can do after
- Operate/configure SwaggerUI to collect a JWT and attach it through the Authorization header on API requests.
Read how Building Web APIs with ASP.NET Core explains HTTP Authorization header →
Spring Security in Action, Second Edition
The HTTP Authorization header carries credentials or authentication tokens in an HTTP request.
- How it is used
- Authenticates requests to Spring Security-protected REST endpoints through HTTP Basic credentials.
- How deep it goes
- Explains header construction, Base64 encoding, curl usage, 401 failure, and HTTPS limits, but does not detail token schemes.
- Examples
- Uses a protected /hello endpoint, curl -u credentials, explicit Authorization construction, and a generated Spring Security password.
- What you can do after
- Operate a protected Spring endpoint by constructing and testing an HTTP Basic Authorization header with curl.
Read how Spring Security in Action, Second Edition explains HTTP Authorization header →
Related concepts
- API keyused by · An API key is a credential used to identify or authorize a client accessing an application programming interface.
- JSON Web Tokenused by · A JSON Web Token is a compact, URL-safe representation of claims encoded as a JSON object and protected by a digital signature, message authentication code, or encryption.
- bearer authenticationused by · Bearer authentication is an authentication scheme in which presenting a bearer token is sufficient to use the access or authorization granted by that token.
- interceptorused by · An interceptor is a middleware component that observes, modifies, or instruments requests, responses, or operations before, during, or after execution.
- access tokenuses · An access token is a security credential that conveys a client's authorization to access protected resources or perform permitted operations.
- request messagepart of · An HTTP request is a message sent by a client to a server that specifies a method and target and may include headers and a body.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.