Proxy-Authorization

E748453

Proxy-Authorization is an HTTP request header used to provide credentials for authenticating a client to a proxy server.

Jump to: Statements Referenced by

Statements (47)

Predicate Object
instanceOf HTTP header field
request header
appliesTo requests sent via an authenticating proxy
authenticationLayer application layer
belongsTo IANA Message Headers registry NERFINISHED
bestPractice use only over HTTPS or other secure transport
canBeRepeated no, typically appears at most once per request
category HTTP authentication header
definedIn Hypertext Transfer Protocol (HTTP) Authentication framework NERFINISHED
RFC 7235 NERFINISHED
direction client-to-proxy
distinctFrom Authorization header
encodingRule header field value is textual
exampleValue Proxy-Authorization: Basic <credentials>
Proxy-Authorization: Digest <parameters>
governedBy HTTP authentication framework NERFINISHED
hasComponent authentication scheme
credentials
hasScope proxy authentication
headerName Proxy-Authorization
ignoredBy origin server in normal operation
introducedIn HTTP/1.1 NERFINISHED
mayContain auth-params
mustComplyWith HTTP header field syntax rules
notUsedFor origin server authentication
partOf HTTP/1.1 protocol
position HTTP header section of the request
processingBy intermediate proxy server
relatedTo Authorization header
Proxy-Authenticate
requires prior Proxy-Authenticate challenge from proxy
securityConsideration Basic authentication sends credentials in an easily decodable form
credentials may be exposed if not used over TLS
supportsScheme Basic
Bearer
Digest
Negotiate
custom authentication schemes
triggeredBy 407 Proxy Authentication Required response
usedBy HTTP clients
HTTP libraries
web browsers
usedFor authenticating a client to a proxy
providing credentials to a proxy server
usedIn HTTP request message
usedWithStatusCode 407
visibility may be logged by proxies if not configured securely

Referenced by (1)

Full triples — surface form annotated when it differs from this entity's canonical label.

RFC 2617 definesHeaderField Proxy-Authorization