Authentication · Response header
WWW-Authenticate
Tells the client which authentication scheme(s) are expected.
What is WWW-Authenticate?
Sent with 401 Unauthorized to advertise the accepted auth scheme (Basic, Bearer, Digest, etc.) and any parameters like realm.
Typical usage
Set on 401 responses.
Examples
WWW-Authenticate: Bearer realm="api"WWW-Authenticate: Basic realm="Restricted"Specification
RFC 9110 §11.6.1