Read Authorization

Base64 Token

The Basic token is base-sixty-four text.

highlighted = computed this step

The token is base-sixty-four text

The token row is copied from the Authorization header after the Basic scheme.

token checked\text{token checked}
Base64 tokenThe Authorization header, base-sixty-four token, decoded credential, and checks are recomputed from pinned bytes.Base64 token - Basic token decodes to alice and a displayed passwordsectionnamevaluecheckrequest linemethodGETparsedrequest linepath/privateparsedrequest lineversionHTTP/1.1parsedheaderHostapi.exampleexactheaderAuthorization schemeBasicparsedheaderAuthorization tokenYWxpY2U6c2V2ZW4=base64 textcredentialbase64 tokenYWxpY2U6c2V2ZW4=pinned textcredentialdecoded displayalice:sevennot encryptedcredentialdecoded hex616c6963653a736576656eexact bytescredentialusernamealicebefore coloncredentialpassword displaysevenafter colonstatusversionHTTP/1.1parsedstatusstatus200 OKokheaderContent-Length0empty bodybodybyte length0countedcheckschemeBasicBasiccheckbase64 decodesyescredential textcheckcolon splityesusername/passwordchecksent body bytes0empty

The token is pinned exactly

The table keeps the exact token text, and the credential hex row carries exact decoded bytes.

token pinned\text{token pinned}
Base64 tokenThe Authorization header, base-sixty-four token, decoded credential, and checks are recomputed from pinned bytes.Base64 token - Basic token decodes to alice and a displayed passwordsectionnamevaluecheckrequest linemethodGETparsedrequest linepath/privateparsedrequest lineversionHTTP/1.1parsedheaderHostapi.exampleexactheaderAuthorization schemeBasicparsedheaderAuthorization tokenYWxpY2U6c2V2ZW4=base64 textcredentialbase64 tokenYWxpY2U6c2V2ZW4=pinned textcredentialdecoded displayalice:sevennot encryptedcredentialdecoded hex616c6963653a736576656eexact bytescredentialusernamealicebefore coloncredentialpassword displaysevenafter colonstatusversionHTTP/1.1parsedstatusstatus200 OKokheaderContent-Length0empty bodybodybyte length0countedcheckschemeBasicBasiccheckbase64 decodesyescredential textcheckcolon splityesusername/passwordchecksent body bytes0empty

Base-sixty-four is encoding

The token is meant to be decoded, not treated as encryption.

encoding, not encryption\text{encoding, not encryption}
Base64 tokenThe Authorization header, base-sixty-four token, decoded credential, and checks are recomputed from pinned bytes.Base64 token - Basic token decodes to alice and a displayed passwordsectionnamevaluecheckrequest linemethodGETparsedrequest linepath/privateparsedrequest lineversionHTTP/1.1parsedheaderHostapi.exampleexactheaderAuthorization schemeBasicparsedheaderAuthorization tokenYWxpY2U6c2V2ZW4=base64 textcredentialbase64 tokenYWxpY2U6c2V2ZW4=pinned textcredentialdecoded displayalice:sevennot encryptedcredentialdecoded hex616c6963653a736576656eexact bytescredentialusernamealicebefore coloncredentialpassword displaysevenafter colonstatusversionHTTP/1.1parsedstatusstatus200 OKokheaderContent-Length0empty bodybodybyte length0countedcheckschemeBasicBasiccheckbase64 decodesyescredential textcheckcolon splityesusername/passwordchecksent body bytes0empty

Summary

The Basic token is readable after base-sixty-four decoding.

token checked\text{token checked}
Base64 tokenThe Authorization header, base-sixty-four token, decoded credential, and checks are recomputed from pinned bytes.Base64 token - Basic token decodes to alice and a displayed passwordsectionnamevaluecheckrequest linemethodGETparsedrequest linepath/privateparsedrequest lineversionHTTP/1.1parsedheaderHostapi.exampleexactheaderAuthorization schemeBasicparsedheaderAuthorization tokenYWxpY2U6c2V2ZW4=base64 textcredentialbase64 tokenYWxpY2U6c2V2ZW4=pinned textcredentialdecoded displayalice:sevennot encryptedcredentialdecoded hex616c6963653a736576656eexact bytescredentialusernamealicebefore coloncredentialpassword displaysevenafter colonstatusversionHTTP/1.1parsedstatusstatus200 OKokheaderContent-Length0empty bodybodybyte length0countedcheckschemeBasicBasiccheckbase64 decodesyescredential textcheckcolon splityesusername/passwordchecksent body bytes0empty