HTTP authenticationBaseline · Widely available
The Authorization and WWW-Authenticate headers authenticate a user with a server.
Supported in all major browsers for at least 30 months — safe to use without fallbacks. Baseline since Jul 29, 2015. Widely available since Jan 29, 2018.
Browser support
DesktopChrome
1+Supportedsince Dec 11, 2008
Current: 155Edge
12+Supportedsince Jul 29, 2015
Current: 154Firefox
1+Supportedsince Nov 9, 2004
Current: 157Safari
1+Supportedsince Jun 23, 2003
Current: 27MobileChrome Android
18+Supportedsince Jun 27, 2012
Current: 155Firefox Android
4+Supportedsince Mar 29, 2011
Current: 157Safari iOS
1+Supportedsince Jun 29, 2007
Current: 27How to use
This feature is Baseline widely available — use it freely, no fallback needed.
Example
Full syntax and examples are on MDN: Authorization.
Feature detection
There’s no simple runtime check for this feature; rely on the support table and test in your target browsers.
Documentation (MDN)
Sub-features
Support for each part of the feature (15). The overall table above shows when the whole feature works.
| Sub-feature | Chrome | Edge | Firefox | Safari | Chrome Android | Firefox Android | Safari iOS |
|---|---|---|---|---|---|---|---|
| http.headers.Authorization | 1 | 12 | 1 | 1 | 18 | 4 | 1 |
| http.headers.Authorization.Basic | 1 | 12 | 1 | 1 | 18 | 4 | 1 |
| http.headers.Authorization.Digest | 1 | 79 | 1 | 1 | 18 | 4 | 1 |
| http.headers.Authorization.Digest.SHA-256 | 117 | 117 | 93 | ✕ | 117 | 93 | ✕ |
| http.headers.Authorization.Digest.md5 | 1 | 79 | 1 | 1 | 18 | 4 | 1 |
| http.headers.Authorization.NTLM | 1 | 79 | 1 | ≤7 | 18 | 4 | ≤7 |
| http.headers.Authorization.Negotiate | 1 | 79 | 1 | ≤7 | 18 | 4 | ≤7 |
| http.headers.Authorization.authorization_removed_cross_origin | ✕ | ✕ | 111 | 16.1 | ✕ | 111 | 16.1 |
| http.headers.WWW-Authenticate | 1 | 12 | 1 | 1 | 18 | 4 | 1 |
| http.headers.WWW-Authenticate.Basic | 1 | 12 | 1 | 1 | 18 | 4 | 1 |
| http.headers.WWW-Authenticate.Digest | 1 | 12 | 1 | 1 | 18 | 4 | 1 |
| http.headers.WWW-Authenticate.Digest.SHA-256 | 117 | 117 | 93 | ✕ | 117 | 93 | ✕ |
| http.headers.WWW-Authenticate.Digest.md5 | 1 | 12 | 1 | 1 | 18 | 4 | 1 |
| http.headers.WWW-Authenticate.NTLM | 1 | 79 | 1 | ≤7 | 18 | 4 | ≤7 |
| http.headers.WWW-Authenticate.Negotiate | 1 | 79 | 1 | ≤7 | 18 | 4 | ≤7 |