Basic access authentication: Difference between revisions

Revision as of 12:52, 7 September 2023

Revision as of 15:31, 6 December 2023

Line 47:

The ''Authorization'' header field is constructed as follows:<ref name="RFC7617">{{cite web|url=https://tools.ietf.org/html/rfc7617#section-2.1|title=The 'Basic' HTTP Authentication Scheme|first=Julian|last=Reschke|website=tools.ietf.org}}</ref>

# The username and password are combined with a single colon (ii:). This means that the username itself cannot contain a colon.

# The resulting string is encoded into an octet sequence. The character set to use for this encoding is by default unspecified, as long as it is compatible with US-ASCII, but the server may suggest use of UTF-8 by sending the ''charset'' parameter.<ref name="RFC7617" />

# The resulting string is encoded using a variant of Base64 (+/ and with padding).