Sessions and Authenticated Pages

Custom headers

{
  "auth": {
    "headers": ["Authorization: Bearer YOUR_TOKEN"]
  }
}

Cookies use standard Set-Cookie formatting:

{
  "auth": {
    "cookies": [
      "session=abc123; Domain=example.com; Path=/; Secure; HttpOnly; SameSite=Lax"
    ]
  }
}

If a cookie has no Domain, Pageshot assigns the target host automatically.

{
  "auth": {
    "basic_auth": {
      "username": "user",
      "password": "pass"
    }
  }
}

Avoid secrets in URLs

URLs containing credentials are rejected by validation. Use auth.basic_auth instead.