From 740d9520a9691b99be195f41408024f83abb1654 Mon Sep 17 00:00:00 2001 From: Daniel Stenberg Date: Sun, 23 Aug 2026 22:57:36 +0200 Subject: [PATCH] docs: mention possible auth option conflicts Do not mix HTTP auth options with custom Authorization headers. Closes #22648 --- docs/libcurl/opts/CURLOPT_HTTPAUTH.md | 4 ++++ docs/libcurl/opts/CURLOPT_HTTPHEADER.md | 10 ++++++++++ docs/libcurl/opts/CURLOPT_PROXYAUTH.md | 4 ++++ 3 files changed, 18 insertions(+) diff --git a/docs/libcurl/opts/CURLOPT_HTTPAUTH.md b/docs/libcurl/opts/CURLOPT_HTTPAUTH.md index 925033281f..6715ddc3e3 100644 --- a/docs/libcurl/opts/CURLOPT_HTTPAUTH.md +++ b/docs/libcurl/opts/CURLOPT_HTTPAUTH.md @@ -37,6 +37,10 @@ extra network round-trip. Set the actual name and password with the CURLOPT_USERPWD(3) option or with the CURLOPT_USERNAME(3) and the CURLOPT_PASSWORD(3) options. +Custom `Authorization:` headers set with CURLOPT_HTTPHEADER(3) may interfere +with and cause unintended side-effects if combined with authentication set +with CURLOPT_HTTPAUTH(3). + For authentication with a proxy, see CURLOPT_PROXYAUTH(3). ## CURLAUTH_BASIC diff --git a/docs/libcurl/opts/CURLOPT_HTTPHEADER.md b/docs/libcurl/opts/CURLOPT_HTTPHEADER.md index 2c9ed039c7..34a864adb1 100644 --- a/docs/libcurl/opts/CURLOPT_HTTPHEADER.md +++ b/docs/libcurl/opts/CURLOPT_HTTPHEADER.md @@ -102,6 +102,16 @@ Host: is not sent at all over the wire. Tells libcurl the upload is to be done using this chunked encoding instead of providing the Content-Length: field in the request. +## Authorization: + +Custom `Authorization:` headers may interfere with and cause unintended +side-effects when combined with authentication set with CURLOPT_HTTPAUTH(3). + +## Proxy-Authorization: + +Custom `Proxy-Authorization:` headers may interfere with and cause unintended +side-effects when combined with authentication set with CURLOPT_PROXYAUTH(3). + # SPECIFIC MIME HEADERS When used to build a MIME email for IMAP or SMTP, the following document-level diff --git a/docs/libcurl/opts/CURLOPT_PROXYAUTH.md b/docs/libcurl/opts/CURLOPT_PROXYAUTH.md index 459fd429c3..a13c992dfc 100644 --- a/docs/libcurl/opts/CURLOPT_PROXYAUTH.md +++ b/docs/libcurl/opts/CURLOPT_PROXYAUTH.md @@ -40,6 +40,10 @@ option. The bitmask can be constructed by the bits listed and described in the CURLOPT_HTTPAUTH(3) man page. +Custom `Proxy-Authorization:` headers set with CURLOPT_PROXYHEADER(3) may +interfere with and cause unintended side-effects if combined with +authentication set with CURLOPT_PROXYAUTH(3). + # DEFAULT CURLAUTH_BASIC