title: Authentication header Vs Authorization header?
body: <p>I find this code in a Web project:</p>
  
  <pre><code>const customHeaders = new HttpHeaders({
        'clientId': env.apiKey,
        'Authorization': `Bearer ${authorization}`,
        'Authentication': `Bearer ${authentication}`
  });
  return this.http.get&lt;UserInfo&gt;(`${env.baseApi}/login`, { headers: customHeaders });
  </code></pre>
  
  <p>I know the header '<code>Authorization</code>' in Spring Security but what is the difference with the header '<code>Authentication</code>'? <strong>For best practice, should we put both?</strong></p>