The authorization HTTP header for all resource requests must include the issuer's assigned username and password encoded using the Basic Authentication scheme.

For example:

Basic base64encode({username}: {password})