[API Shield] Default authorization header

[patriciasantaana]

Summary

Add information on session identifiers about the default Authorization header

Documentation checklist

• The documentation style guide has been adhered to.

[hyperlint-ai]

Howdy and thanks for contributing to our repo. The Cloudflare team reviews new, external PRs within two (2) weeks. If it's been two weeks or longer without any movement, please tag the PR Assignees in a comment.

We review internal PRs within 1 week. If it's something urgent or has been sitting without a comment, start a thread in the Developer Docs space internally.

---

PR Change Summary

Added information regarding the default Authorization header as a session identifier for API Shield.

• Introduced the default Authorization header as a session identifier for API Shield.
• Clarified that Cloudflare will set the Authorization header as the session identifier if used in over 1% of successful requests.

Modified Files

• src/content/partials/api-shield/session-identifiers.mdx

---

How can I customize these reviews?

Check out the Hyperlint AI Reviewer docs for more information on how to customize the review.

If you just want to ignore it on this PR, you can add the hyperlint-ignore label to the PR. Future changes won't trigger a Hyperlint review.

Note specifically for link checks, we only check the first 30 links in a file and we cache the results for several hours (for instance, if you just added a page, you might experience this). Our recommendation is to add hyperlint-ignore to the PR to ignore the link check for this PR.

[github-actions]

Preview URL: https://d38962f6.preview.developers.cloudflare.com
Preview Branch URL: https://patricia-pcx17064-session-id-auth.preview.developers.cloudflare.com