title: OAuth 2.0 Authorization Header
body: <p>I want to develop a SDK that encapsules the OAuth 2.0 functions. I have checked the differences  between OAuth 1.0 &amp; 2.0, and I have some confusion on Authorization Header (<a href="https://www.rfc-editor.org/rfc/rfc5849#section-3.5.1" rel="nofollow noreferrer">1.0</a> and
  <a href="https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-27#page-8" rel="nofollow noreferrer">2.0</a>), OAuth 1.0 protocol parameters can be transmitted using the HTTP &quot;Authorization&quot; header, but I can't find this described in current OAuth 2.0 draft.</p>
  <p>Does OAuth 2.0 supports authorization headers?</p>
  <p>In OAuth 1.0 your header would look like:</p>
  <pre><code>Authorization: OAuth realm=&quot;Example&quot;,
      oauth_consumer_key=&quot;0685bd9184jfhq22&quot;,
      oauth_token=&quot;ad180jjd733klru7&quot;,
      oauth_signature_method=&quot;HMAC-SHA1&quot;,
      oauth_signature=&quot;wOJIO9A2W5mFwDgiDvZbTSMK%2FPY%3D&quot;,
      oauth_timestamp=&quot;137131200&quot;,
      oauth_nonce=&quot;4572616e48616d6d65724c61686176&quot;,
      oauth_version=&quot;1.0&quot;
  </code></pre>