// http header · response header

WWW-Authenticate

Authentication scheme for a 401

What the WWW-Authenticate header does

WWW-Authenticate is sent with a 401 Unauthorized to tell the client which authentication scheme to use, such as Bearer or Basic. It's the server's way of saying 'authenticate like this and try again.'

Example

WWW-Authenticate: Bearer

Where it's used

WWW-Authenticate is a response header. Response headers are sent by the server to describe the response and tell the client how to handle it.

Other response headers