# UAA service DELETE request basic authentication error

**URL:** <https://community.gatling.io/t/uaa-service-delete-request-basic-authentication-error/749>\
**Category:** Gatling (Open-Source)\
**Created:** [December 26, 2013, 9:43am UTC](https://community.gatling.io/t/uaa-service-delete-request-basic-authentication-error/749 "2013-12-26T09:43:30Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Excilys](https://avatars.discourse-cdn.com/v4/letter/e/8797f3/32.png) [@Excilys](https://community.gatling.io/u/Excilys)\
**Post date:** [December 26, 2013, 9:43am UTC](https://community.gatling.io/t/uaa-service-delete-request-basic-authentication-error/749/1 "2013-12-26T09:43:30Z")

</div>

Is the Authentication: Basic header properly sent when you remove your own “Authorization”, “”“Bearer ${admin\_token}”""?

---

<div class="post-metadata">

**Author:** ![gerraldgerring](https://avatars.discourse-cdn.com/v4/letter/g/d9b06d/32.png) [@gerraldgerring](https://community.gatling.io/u/gerraldgerring)\
**Post date:** [December 26, 2013, 10:35am UTC](https://community.gatling.io/t/uaa-service-delete-request-basic-authentication-error/749/2 "2013-12-26T10:35:42Z")

</div>

Hi Stephane,

It turned out to be my fault.  
I was sending basicAuth along with “Authorization”, “”“Bearer ${admin\_token}”" that overritten the token. Removed that and got authorized properly.

My own foot sharpshooter I am

I deleted that post to clean up the group

Thanks for reply though!

GerraldG

---

<div class="post-metadata">

**Author:** ![Excilys](https://avatars.discourse-cdn.com/v4/letter/e/8797f3/32.png) [@Excilys](https://community.gatling.io/u/Excilys)\
**Post date:** [December 26, 2013, 10:46am UTC](https://community.gatling.io/t/uaa-service-delete-request-basic-authentication-error/749/3 "2013-12-26T10:46:57Z")

</div>

Hi,

Thanks for your reply.  
Still, I wonder if there’s a use case for multiple Authorization headers. No clue.

Cheers,

Stéphane

---

<div class="post-metadata">

**Author:** ![gerraldgerring](https://avatars.discourse-cdn.com/v4/letter/g/d9b06d/32.png) [@gerraldgerring](https://community.gatling.io/u/gerraldgerring)\
**Post date:** [December 26, 2013, 11:26am UTC](https://community.gatling.io/t/uaa-service-delete-request-basic-authentication-error/749/4 "2013-12-26T11:26:12Z")

</div>

I did not go to the details - really did not have time due to deadline.  
But from what I saw in Membrane proxy is that is use both header with token and basicAuth togather - the later overwrites the token.  
So Authentication header would containg encoded username / password instead of admin token.

Basic is not enough for the service to allow delete. Thus, got 401 error. Just removed basicAuth and send admin token in Authentication header. Works fine for now.

Regards,

GerraldG

---

<div class="post-metadata">

**Author:** ![Excilys](https://avatars.discourse-cdn.com/v4/letter/e/8797f3/32.png) [@Excilys](https://community.gatling.io/u/Excilys)\
**Post date:** [December 27, 2013, 7:01pm UTC](https://community.gatling.io/t/uaa-service-delete-request-basic-authentication-error/749/5 "2013-12-27T19:01:18Z")

</div>

Thanks.  
I will see if there’s a way to make basicAuth not override existing Authentication header.