BURP PROXY

GET /api/v1/users HTTP/1.1
Host: target.local
Authorization: Bearer ********

HTTP/1.1 200 OK
Content-Type: application/json█

WIRESHARK

No.  Source       Destination  Protocol
12   10.0.0.5      10.0.0.1     TLSv1.3
13   10.0.0.1      10.0.0.5     TCP
14   10.0.0.5      10.0.0.1     HTTP/2█

$ curl -i https://target.local/login
Set-Cookie: session=********; HttpOnly; Secure
Strict-Transport-Security: max-age=31536000█