Provide auth tokens with every request

jspahrsummers · jspahrsummers · commit b3364c94e580 · 2025-03-18T12:59:40.000Z
diff --git a/docs/specification/draft/basic/authorization.md b/docs/specification/draft/basic/authorization.md
@@ -251,6 +251,9 @@ requirements for resource requests. Specifically:
 Authorization: Bearer <access-token>
 ```
 
+Note that authorization **MUST** be included in every HTTP request from client to server,
+even if they are part of the same logical session.
+
 2. Access tokens **MUST NOT** be included in the URI query string
 
 Example request:
