Cookie

Cookies the browser stored for this site.

Request header (sent by clients) auth

How it works

Sent automatically by browsers, which is why cookie-authenticated APIs need CSRF protection.

Example

Cookie: session=abc123

See it live: send any request in Endpoint Client and open the Headers tab, where every response header is explained. Specification: RFC 6265.

Related headers

Authorization

Credentials for the request.

Set-Cookie

Asks the browser to store a cookie.

WWW-Authenticate

The authentication scheme the server expects.