So now we can either interpret an HTTP_AUTHORIZATION or build one HTTP_AUTHORIZATION So far , only Basic auth is supported.