What does Authorization: Bearer mean?

What does Authorization: Bearer mean?

The Authorization: Bearer header is used to send a bearer token in an HTTP request. Bearer tokens are security tokens that allow the client to access a protected resource without needing to provide any additional authentication credentials.

In an HTTP request, the Authorization header is used to include authentication information. The Bearer scheme is used to specify that the token being sent is a bearer token. The token itself is included in the header as the value after the Bearer keyword. For example:

Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c

This header is commonly used in OAuth 2.0 authentication flows to send access tokens that allow the client to access protected resources on behalf of the user. When the server receives an HTTP request that includes a Bearer token in the Authorization header, it verifies the token to determine if the client is authorized to access the requested resource.

 

作者:Chuck Lu    GitHub