Connected: An Internet Encyclopedia
10.16 WWW-Authenticate

Up: Connected: An Internet Encyclopedia
Up: Requests For Comments
Up: RFC 1945
Up: 10. Header Field Definitions
Prev: 10.15 User-Agent
Next: 11. Access Authentication

10.16 WWW-Authenticate

10.16 WWW-Authenticate

The WWW-Authenticate response-header field must be included in 401 (unauthorized) response messages. The field value consists of at least one challenge that indicates the authentication scheme(s) and parameters applicable to the Request-URI.

       WWW-Authenticate = "WWW-Authenticate" ":" 1#challenge

The HTTP access authentication process is described in Section 11. User agents must take special care in parsing the WWW-Authenticate field value if it contains more than one challenge, or if more than one WWW-Authenticate header field is provided, since the contents of a challenge may itself contain a comma-separated list of authentication parameters.


Next: 11. Access Authentication

Connected: An Internet Encyclopedia
10.16 WWW-Authenticate