Rick Strahl posted this excellent article on pre-authenticating HTTP requests - this is something that’s caught me in the past but he explains the whole concept so well here I thought this was worth noting for my own future reference.