HTTP headers
WWW-Authenticate HTTP Header Meaning
WWW-Authenticate tells the client how to authenticate.
Meaning
The server is challenging the client with one or more authentication schemes.
Where it appears
Servers usually send it with 401 Unauthorized responses.
What to check
Check that the challenge matches the expected authentication scheme and includes required realm or error details.
Example
WWW-Authenticate: Bearer realm="api"