# HTTP API "Access-Token" in response header is now without curly brackets

**URL:** https://talk.remobjects.com/t/http-api-access-token-in-response-header-is-now-without-curly-brackets/34221
**Category:** Remoting SDK
**Tags:** delphi
**Created:** [October 26, 2026, 1:42pm UTC](https://talk.remobjects.com/t/http-api-access-token-in-response-header-is-now-without-curly-brackets/34221 "2026-10-26T13:42:52Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![cfhdhigroupcom](https://talk.remobjects.com/letter_avatar_proxy/v4/letter/c/8e8cbc/32.png) [@cfhdhigroupcom](https://talk.remobjects.com/u/cfhdhigroupcom)
#### Post date: [October 26, 2026, 1:42pm UTC](https://talk.remobjects.com/t/http-api-access-token-in-response-header-is-now-without-curly-brackets/34221/1 "2026-10-26T13:42:52Z")

</div>

Hi RemObjects

After upgrading to : RemObjects Remoting SDK for Delphi 10.0.0.1627 I seem to get a slightly different response header than previous.

Specifically “Access-Token” (HttpApiSimpleAuthenticationManager) is (now) returned without curly brackets in the response header (at least in my project)

Looking in the source : “unit uROHttpApiSimpleAuthenticationManager” line 150-162 it looks like some code has changed/been commented out (line 158)

Could you please help clarify this to me??

Thank you in advance

Christian

---

<div class="post-metadata">

### Author: ![EvgenyK](https://talk.remobjects.com/user_avatar/talk.remobjects.com/evgenyk/32/16_2.png) [@EvgenyK](https://talk.remobjects.com/u/EvgenyK)
#### Post date: [October 26, 2026, 2:11pm UTC](https://talk.remobjects.com/t/http-api-access-token-in-response-header-is-now-without-curly-brackets/34221/2 "2026-10-26T14:11:26Z")

</div>

Hi,

according to [The OAuth 2.1 Authorization Framework](https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-1/) only limited set of chars can be used for bearer token:

- Letters (`A`-`Z`, `a`-`z`)
- Digits (`0`-`9`)
- Six special characters: `-`,`.`, `_`, `~`, `+`, `/`
- Trailing `=` padding characters (for base64 encoding)

curly brackets aren’t in allowed chars

---

<div class="post-metadata">

### Author: ![cfhdhigroupcom](https://talk.remobjects.com/letter_avatar_proxy/v4/letter/c/8e8cbc/32.png) [@cfhdhigroupcom](https://talk.remobjects.com/u/cfhdhigroupcom)
#### Post date: [October 26, 2026, 2:44pm UTC](https://talk.remobjects.com/t/http-api-access-token-in-response-header-is-now-without-curly-brackets/34221/3 "2026-10-26T14:44:18Z")

</div>

Understood.

Thank you for (as usual) very fast response.

/Christian