Web & APIsIntermediate
HTTP Header
Pronunciationaitch-tee-tee-pee HED-er
Definition
Extra information sent with a request or response, such as the content type or the authorization token.
Where you hear it
API docs, authentication, caching, and CORS issues.
Examples
Send the token in the
Authorizationheader.Set
Content-Type: application/jsonor the server will not parse the body.
Common mistake
Forgetting that headers can be read and changed by the client. Never rely on them alone for security.