# Oberon Authentication Scheme Format

**Header Format**

`Authorization: Oberon <params>`

**Parameters**

Parameters are comma separated name/value pairs.

`ver` - *(required)* schema version, example: `ver=1`
`proof` - *(required)* the generated proof encoded as base64url string
`data` - *(optional)* the data payload used as identity information encodes as base64url string
`nonce` - *(optional)* the nonce payload used to generate this proof encoded as base64url string
`nonce_fmt` - *(optional)* format identifier that specifies how the nonce format was generated; this allows extensions to perform custom functionality, such as data integrity, etc; this field should be a URI

**Examples**

`Authorization: Oberon ver=1,proof="cGFkZGluZw",data="ZGF0YSBpcyB0aGlz",nonce="bm9uY2U"`

Alternatively, parameters can be included in separate headers

`x-oberon-data: ZGF0YSBpcyB0aGlz`
`x-oberon-nonce-fmt: http://trinsic.id/schemas/auth/oberon`
`x-oberon-ver: 1`