Authorization
All the service requests should include an Authorization header for the HTTP Basic authentication scheme.
When no such header is given, the service will respond with status code 401 Unauthorized including a challenge for the HTTP Basic authentication and a random realm code. This realm code is generated each time the backend server is restarted.
The server will respond with status code 403 Forbidden if the user in the Authorization header is not using the right username / password combination or is not allowed access to the service.