diff --git a/src/api.js b/src/api.js
index b3415c08e..0c4865841 100644
--- a/src/api.js
+++ b/src/api.js
@@ -9,6 +9,8 @@
  *
  * @param {string|TypedAray} source Either a url to a PDF is located or a
  * typed array (Uint8Array) already populated with data.
+ * @param {Object} headers An object containing the http headers like this:
+ * { Authorization: "BASIC XXX" }
  * @return {Promise} A promise that is resolved with {PDFDocumentProxy} object.
  */
 PDFJS.getDocument = function getDocument(source, headers) {
diff --git a/src/core.js b/src/core.js
index 908ba63af..e999550ca 100644
--- a/src/core.js
+++ b/src/core.js
@@ -32,11 +32,14 @@ function getPdf(arg, callback) {
 
   var xhr = new XMLHttpRequest();
   
-  if(params.headers){
-    //TODO: Code this, use xhr.setRequestHeader(key, value);
-  }
-  
   xhr.open('GET', params.url);
+  if(params.headers){
+    for(var property in params.headers){
+      if(typeof(params.headers[property]) !== undefined){
+	xhr.setRequestHeader(property, params.headers[property]);
+      }
+    }
+  }
   xhr.mozResponseType = xhr.responseType = 'arraybuffer';
   var protocol = params.url.indexOf(':') < 0 ? window.location.protocol :
     params.url.substring(0, params.url.indexOf(':') + 1);