Right...but I'm talking about the possibility that information can be sent from server to client for use in the next client to server discussion...which the redirect header already does for URI. The question is
- How do we construct an Authorization header to pass back to the client (with the intention of the client using it)
This is my attempt to find that info.
- Does it work, or does the client discard such data?
Someone will have to test that.