Laravel.io
//     RESPONSE HEADERS     //
Access-Control-Allow-Credentials:true
Access-Control-Allow-Origin:http://hoshi.naitonalmachine.co
Access-Control-Expose-Headers:Authorization
Authorization:Bearer eyJ0eXAiOiJKV1QiLCJ...



//     RESPONSE ACCORDING TO JS    // 

config: Object
    headers: Object
    Accept: "application/json, text/plain, */*"
    Authorization: "Bearer eyJ0eXAiOiJKV1Qi..." -> THIS IS THE REQUEST HEADERS
    __proto__: Object
    method: "GET"
    paramSerializer: (t)
    transformRequest: Array[1]
    transformResponse: Array[1]
    url: "http://hoshi.nationalmachine.io/admin/pages"
    __proto__: Object
data: Object
    pages: Array[6]
    __proto__: Object
headers: (n)
    arguments: (...)
    caller: (...)
    length: 1
    name: ""
    prototype: Object
    __proto__: ()
    <function scope>
status: 200
statusText: "OK"

Please note that all pasted data is publicly available.