HTTP-headers | Every call we send to and receive from a web server

Can you explain for the dumb, where is the authorization token stored for http-headers that are returned to the client from the server?

I want to send a GET request to a website in on python in requests library but it is timing out. When i send a Get request in linux bash (with wget) it is responding.

This is working on python:

I have this function which updates preference in the mongoDB database.

I have been trying to consume a SOAP service using a Spring application, but I've been absolutely stuck for a while. I expect the solution will be very simple and I'm hoping to be pointed in the right direction.

I am able to successfully make requests via SoapUI. I simply loaded the .WSDL file, selected the method to use, and added the username and password with basic authorization from the 'Auth' menu in SoapUI.

In the Spring application, I've gotten to the point of getting a 401 error, so I believe it's almost there. I referenced these two nice examples below to first add the username and password, and secondly to log the HTTP headers to verify that they are populated correctly.

https://codenotfound.com/spring-ws-log-client-server-http-headers.html

Setting a custom HTTP header dynamically with Spring-WS client

However, neither setting the 'usernamePasswordCredentials', nor setting the connection's request header seems to have any effect. I've also confirmed that the XML body is correct by testing the logged output in SoapUI. So I believe it's just an authorization issue.

Bean/Configuration Class:

We have an Azure Application Gateway setup and working. We want to add a rule that matches the following criteria for a header named X.

1. If X is not present at all in the incoming request - then let the request go through
2. If X is present but is blank or contains white-spaces - then block the request
3. If X is present but contains at least 1 non space character - then let the request go through

I used the following pattern .+ (any character 0 of more times) - this satisfies bullet points 1 only but fails for bullet point 2 (it doesn't block the request if header is blank or has spaces) and 3 (if the header contains a non space character like p then request fails to go through).

What type of regular expression I need to use to satisfy all three conditions? I was expecting .+ to satisfy at least bullet points 1 and 3.

https://docs.microsoft.com/en-us/azure/application-gateway/rewrite-http-headers-url#check-for-the-presence-of-a-header

I want to use the new java.net.HttpClient to do some requests to another system.

For debug purposes I want to log (and later store in our db) the request that I send and the response that I receive.

How can I retrieve the effective http headers, that java is sending?

I tried to get the headers like this:

What I am trying to do here is that I am going to send a converted pdf to base64 to an endpoint where in this is the endpoint

I am writing my own http server. I need to check each header from the given list (if it was given an invalid value). I also can not use any third party libraries.
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers
Yes, I was looking for a solution, I have seen these and other questions:
Parse HTTP headers in C++
How to correctly parse incoming HTTP requests
How to parse HTTP response using c++
I also tried to find the source file \ example of implementing that in libcurl here, but I couldn't.
https://curl.se/libcurl/c/example.html
My own work according to this article:
https://developer.mozilla.org/en-US/docs/Glossary/CORS-safelisted_request_header

Background:
I have a small RaspberyPi-like server on Armbian (20.11.6) (precisely - on Odroid XU4). I use lighttpd to serve pages (including Home Assistant and some statistics and graphs with chartjs). (the example file here is Chart.bundle.min.js.gz)

Issue:
There seems to be a growing amount of javascript files, which become larger than the htmls and the data itself (some numbers for power/gas consumption etc.). I am used to use mod_compress, mod_deflate etc on servers (to compress files on the fly), but this would kill the Odroid (or unnecessarily load CPU and the pitiful SD card for caching).

Idea:
Now, the idea is, just to compress the javascript (and other static (like css)) files and serve it as static gzip file, which any modern browser can/should handle.

Solution 0:
I just compressed the files, and hoped that the browser will understand it... (Clearly the link was packed in the script html tag, so if the browser would get that gz is a gzip... it should maybe work). It did not ;)

Solution 1:
I enabled mod_compress (a suggested on multiple pages) and and tried to serve static js.gz file.
https://www.drupal.org/project/javascript_aggregator/issues/601540
https://www.cyberciti.biz/tips/lighttpd-mod_compress-gzip-compression-tutorial.html
Without success (browser takes it as binary gzip, and not as application/javascript type). (some pages suggested enabling mod_deflate, but it does not seem to exist)

Solution 2:
(mod_compress kept on) I did the above, and started fiddling with the Content-Type, Content-Encoding in the HTML (in the script html tag). This did not work at all, as the Content-Type can be somehow influenced in HTML, but it seems that the Content-Encoding can not.
https://www.geeksforgeeks.org/http-headers-content-type/
(I do not install php (which could do it) to save memory, sd card lifetime etc.).

Solution 3:
I added "Content-Encoding" => "gzip" line to the 10-simple-vhost.conf default configuration file in the setenv.add-response-header. This looked as a dirty crazy move, but I wanted to check if the browser accepts my js.gz file... It did not.
And furthermore nothing loaded at all.

Question:
What would be an easy way to do it ? (without php).
Maybe something like htaccess in Apache ?

EDIT 1:
It seems that nginx can do it out-of-the-box:
Serve static gzip files using node.js
http://nginx.org/en/docs/http/ngx_http_gzip_static_module.html
I am also digging into the headers story in lighttpd:
https://community.splunk.com/t5/Security/How-to-Disable-http-response-gzip-encoding/m-p/64396

EDIT 2:
Yes... after some thinking, I got to the idea that it seems that this file could be cached for a long time anyway, so maybe I should not care so much :)