How a request authenticates.
No Authorization header, for servers that need none.
No Authorization header, for servers that need none.
Authorization: Bearer <token>, the token fetched per request from provider and refreshed once on a 401. The caller owns provider. A token() that throws fails the request with an AuthenticationError naming the exception's class, and an invalidate that throws is ignored: neither escapes complete or streamComplete.
Authorization: Bearer <token>, the token fetched per request from provider and refreshed once on a 401. The caller owns provider. A token() that throws fails the request with an AuthenticationError naming the exception's class, and an invalidate that throws is ignored: neither escapes complete or streamComplete.
Authorization: Bearer <token>, the token obtained by the RFC 8693 exchange config describes, cached until shortly before it expires and refreshed once on a 401. The exchange goes through the client's own HTTP client, closed with the client.
Authorization: Bearer <token>, the token obtained by the RFC 8693 exchange config describes, cached until shortly before it expires and refreshed once on a 401. The exchange goes through the client's own HTTP client, closed with the client.
Authorization: Bearer <key>; key must not be blank - the client refuses an empty bearer.
Authorization: Bearer <key>; key must not be blank - the client refuses an empty bearer.