Authentication

Headers that carry who the caller is — credentials, tokens, keys, signatures of identity. The most declared category in the catalog and the most inconsistently spelled.

44 headers

3096 provider declarations

Header	Providers	Status
Authorization	1176	permanent
x-api-key	667	de-facto
X-Amz-Date	98	de-facto
X-Amz-Security-Token	97	de-facto
X-Amz-Content-Sha256	97	de-facto
X-Amz-Credential	96	de-facto
X-Amz-Signature	96	de-facto
X-Amz-SignedHeaders	96	de-facto
X-Amz-Algorithm	96	de-facto
api-key	92	de-facto
x-fapi-auth-date	88	de-facto	regulated
apikey	83	de-facto
x-client-id	46	de-facto
key	44	de-facto
X-AUTH-TOKEN	41	de-facto
api_key	40	de-facto
token	38	de-facto
Set-Cookie	37	permanent	regulated
Ocp-Apim-Subscription-Key	34	de-facto
WWW-Authenticate	24	permanent
Cookie	7	permanent
x-fapi-customer-last-logged-time	3	vendor	regulated
Security-Scheme	—	obsoleted
Sec-Token-Binding	—	permanent
Proxy-Authorization	—	permanent
Proxy-Authentication-Info	—	permanent
Proxy-Authenticate	—	permanent
OSCORE	—	permanent
Optional-WWW-Authenticate	—	permanent
Lock-Token	—	permanent
Include-Referred-Token-Binding-ID	—	permanent
Hobareg	—	permanent
DPoP-Nonce	—	permanent
DPoP	—	permanent	regulated
CTA-Common-Access-Token	—	provisional
Cookie2	—	obsoleted
Concealed-Auth-Export	—	permanent
Client-Cert-Chain	—	permanent
Client-Cert	—	permanent
Cert-Not-Before	—	permanent
Cert-Not-After	—	permanent
Authentication-Info	—	permanent
Authentication-Control	—	permanent
Set-Cookie2	—	obsoleted

All categories

Authentication Authorization & Scope Caching Conditional Requests & Concurrency Content Negotiation Representation Metadata Connection & Transport CORS Security Policy Privacy & Consent Rate Limiting & Quota Tracing & Correlation Idempotency & Reliability Versioning & Lifecycle Integrity & Signing Async & Long-Running Cost & Metering Agent & Bot Identity