I am currently developing a REST-API which is HTTP-Basic protected for the development environment. As the real authentication is done via a token, I\'m still trying to figu
I had a similar problem - authenticate device and user at device. I used a Cookie header alongside an Authorization: Bearer... header.
Cookie
Authorization: Bearer...