Fail to get access token

Any document to teach about how to use Authorization header to get access right?