HTTP headers | Accept

HTTP headers | Sec-WebSocket-Accept

Last Updated : 22 Nov, 2019

The HTTP headers are used for passing additional information with an HTTP request or response between the client and the server. They are grouped as general-headers, request-headers, response-headers, entity-headers. The Sec-WebSocket-Accept header falls under the response-type headers category. It is used by the server to intimate the client that it understood. It was a WebSocket connection and it is ready to open connection. This comes handy for a reverse-proxy server as it can understand the WebSocket handshake and not to make a useless cache. The Sec-WebSocket-Accept header must not appear more than once in an HTTP response.

Note: The HTTP headers usually contain a case-insensitive name followed by a colon (:), then by its value. White-space before the value is ignored here.

Syntax:

Sec-WebSocket-Accept: <hashed key>

Directives: The HTTP Sec-WebSocket-Accept header accepts a single directive that mentioned above and described below:

<hashed key> The server takes the value of Sec-WebSocket-Key sent in handshake request and then appends Globally Unique Identifier (GUID, [RFC4122]) “258EAFA5-E914-47DA-95CA-C5AB0DC85B11” takes SHA-1 of the new value, and is then base64 encoded. This is unlikely to be used by network endpoints that do not understand the WebSocket Protocol.

Below example will illustrate the HTTP Sec-WebSocket-Accept header:

Example: In this example, the server sends 101 response codes if the incoming connection is a WebSocket connection to the client.

101 Switching Protocols
Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Accept: MTMyNThFQUZBNS1FOTE0LTQ3REEtOTVDQS1DNUFCMERDODVCMTE=
Sec-WebSocket-Extensions: deflate-frame
Sec-WebSocket-Protocol: soap

Note: This header is not stable there are few research is going on right now on this header.

Supported Browsers: The browsers are compatible with HTTP Sec-WebSocket-Accept header are listed below:

Chrome
Internet Explorer
Firefox
Safari
Opera

HTTP headers | Accept

G

Gokul_Kumar_B

Improve

Article Tags :

Similar Reads

HTTP headers | Accept-Ranges

The HTTP Accept-Ranges is the Response type header also the part of the ranges system. This header act as a marker that is used by the server to supports the partial request of the clients. The HTTP Accept-Ranges is useful when the client requests any particular portion of a huge file then this head

HTTP headers | Accept

The HTTP Accept header is a request type header. The Accept header is used to inform the server by the client that which content type is understandable by the client expressed as MIME-types. By using the Content-negotiation the server selects a proposal of the content type and informs the client of

HTTP headers | Accept-CH

The HTTP Accept-CH header is a response-type header that indicates the client hints that the server can support and should include in further requests. Syntax: Accept-CH: client hints Note: The client hints can be more than one and are to be separated by commas. Directives: The HTTP Accept-CH header

HTTP headers | Alt-Svc

The HTTP headers Alt-Svc header is a response-type header it has been used to advertise alternative service. Which services can be defined by a protocol/host/port combination. Syntax: Alt-Svc: clear Alt-Svc: <protocol-id>=<alt-authority>; ma=<max-age>; persist=1 Directives: This he

HTTP headers | Keep-Alive

The Keep-Alive header is a general-type header. This header is used to hint at how the connection may be used to set a timeout and a maximum amount of requests. It can also be used to allow a single TCP connection to remain open for multiple HTTP requests/responses (default HTTP connection closed af

HTTP headers | Access-Control-Request-Method

The HTTP headers Access-Control-Request-Method is a request type header which has been used to inform the server that which HTTP method will be used when the actual request is made. Syntax: Access-Control-Request-Method: <method> Directives: This header accept a single directive which is menti

HTTP headers | Expect-CT

The HTTP Expect-CT header is a response-type header that prevents the usage of wrongly issued certificates for a site and makes sure that they do not go unnoticed and it also allows sites to decide on reporting or enforcement of Certificate Transparency requirements. Syntax: Expect-CT max-age=<ag

HTTP headers | Expect

The HTTP headers Expect request-header field is used to indicate specific behaviors or expectations that the server needs to fulfill in order to respond to the client. Generally, Expect: 100-continue is the only expectation defined for the header field. If the data provided in the header field meets

HTTP headers | Server

The HTTP Server header is a response-type header that contains the information about the used software by the server to handle all the requests. This header will only a few details of the server like the server name software like sffe, cloudflare etc. Hide all the important information because that

How to Use WebSocket and Load Balancers?

WebSockets are a technology that allows websites and servers to talk to each other in real time. It's like having a phone line that stays open between your browser and a server, so they can send messages back and forth quickly and efficiently without having to reconnect all the time. Important Topic