How to prevent/override authorization header in Safari?

Question

I have web page under / which requires Basic auth. Under /api/* REST API is served which does require JWT token passed in Authorization header.

In Chrome it works fine: when I load web page it asks me for Basic credentials and then webpage performs AJAX requests to /api/* along with JWT in Authorization header.

In Safari however, all AJAX requests are sent with Authorization header set to Basic credentials, and does not allow to set JWT in Authorization header...

Is there any workaround for this situation?

I am setting JWT for AJAX requests like this:

$.ajaxSetup({
  headers: {'Authorization': accessToken}
});

Answer 1

I had this problem and probably it's a bug in Safari.

The request from Safari:

The same request in Wireshark:

Solution: don't use basic auth or change the authorization header name (e.g. use X-My-Api-Auth).