topic
Verified 2026-09-18

HTTP/2 Pseudo-Fields

HTTP/2 represents request and response control data with pseudo-fields such as :method, :scheme, :authority, and :path.

Pseudo-fields must appear before ordinary fields and are not ordinary HTTP/1.1 headers. Never forward HTTP/2 pseudo-fields as user-controlled application fields without validating the mapping.

httphttp2protocolproxy

Reference (http)

:method: GET
:scheme: https
:authority: example.com
:path: /resource

Pseudo-fields must appear before ordinary fields and are not ordinary HTTP/1.1 headers. Never forward HTTP/2 pseudo-fields as user-controlled application fields without validating the mapping.

Common mistakes

  • Forwarding connection-specific HTTP/1.1 fields into HTTP/2 or accepting duplicate, reordered, or invalid pseudo-fields.

Sources

Permalink: https://merginit.com/reference/http/http2-pseudo-fields