WWW-Authenticate

The authentication scheme the server expects.

Response header (sent by servers) auth

How it works

Sent with 401. Bearer challenges can include error="invalid_token" and the required scope.

Example

WWW-Authenticate: Bearer error="invalid_token"

See it live: send any request in Endpoint Client and open the Headers tab, where every response header is explained. Specification: RFC 9110.

Related headers

Authorization

Credentials for the request.

Cookie

Cookies the browser stored for this site.

Set-Cookie

Asks the browser to store a cookie.