Topic Cluster

HTTP Authentication

Auth flows, authorization semantics, credentials handling, and access control patterns.

All Topic Clusters Search All Content

HTTP Status Codes
407 Proxy Authentication Required: Fix It
407 means your proxy wants credentials before forwarding the request. Fix it in curl, npm, pip, git and browsers, and learn how Proxy-Authenticate works.
HTTP Status Codes
HTTP 401 Unauthorized: Authentication Required
401 Unauthorized means missing or invalid credentials. Read WWW-Authenticate, check the Authorization header, token expiry and proxies, with fixes by stack.
HTTP Status Codes
HTTP 403 Forbidden: Access Denied
403 Forbidden means the server refuses the request. Find whether Cloudflare, nginx, Apache, S3 or your app sent it; fix permissions, WAF rules and role checks.
HTTP Headers
Authentication-Info Header
Learn how Authentication-Info provides additional authentication data in responses to successful requests. Covers digest authentication and session info.
HTTP Headers
Authorization Header: Bearer, Basic and 401 Fixes
Authorization header carries credentials as scheme plus token. Bearer and Basic formats, WWW-Authenticate, why proxies strip it, redirects, CORS and storage.
HTTP Headers
Cookie Header
Learn how the Cookie header sends stored cookies to servers with each request. Understand cookie transmission, session management, and security considerations.
HTTP Headers
Proxy-Authenticate Header
Learn how the Proxy-Authenticate header challenges clients for credentials when accessing resources through a proxy. Understand proxy authentication schemes.
HTTP Headers
Proxy-Authorization Header
Learn how Proxy-Authorization provides credentials to access resources through a proxy server. Understand proxy authentication schemes and security.
HTTP Headers
Set-Cookie Header: Attributes, Examples and Browser Rules
Set-Cookie syntax and every attribute: Expires, Max-Age, Domain, Path, Secure, HttpOnly, SameSite, Partitioned, __Host- prefixes, with Express and Django.
HTTP Headers
WWW-Authenticate
Learn how the WWW-Authenticate header specifies authentication methods required to access protected resources. Understand Basic, Bearer, and Digest schemes.
Guides
HTTP Authentication Methods and Best Practices
A comprehensive guide to HTTP authentication methods including Basic Auth, Bearer tokens, API keys, and OAuth 2.0.

HTTP Authentication

407 Proxy Authentication Required: Fix It

HTTP 401 Unauthorized: Authentication Required

HTTP 403 Forbidden: Access Denied

Authentication-Info Header

Authorization Header: Bearer, Basic and 401 Fixes

Cookie Header

Proxy-Authenticate Header

Proxy-Authorization Header

Set-Cookie Header: Attributes, Examples and Browser Rules

WWW-Authenticate

HTTP Authentication Methods and Best Practices

More Topic Clusters

HTTP Troubleshooting

HTTP Fundamentals

HTTP Security

HTTP Performance