NOTE: Requests without authorization will be met with a HTTP 401 Unauthorized message. Web browsers will generally intercept this message and prompt the user for credentials. The browser will then properly build the Authentication header and send it with the request.

When the user agent wants to send the server authentication credentials it may use the Authorization header. The Authorization header is constructed as follows:
  1. Username and password are combined into a string 'username:password'
  2. The resulting string literal is then encoded using the RFC2045-MIME variant of Base64, except not limited to 76 char/line
  3. The authorization method and a space i.e. 'Basic ' is then put before the encoded string.
For example, if the user agent uses 'Aladdin' as the username and 'open sesame' as the password then the header is formed as follows:

Authorization: Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ==

Java php jsp R MATLAB Python