diff --git a/core-ajax.html b/core-ajax.html
index 6c6a885..a6dcd61 100644
--- a/core-ajax.html
+++ b/core-ajax.html
@@ -32,7 +32,7 @@
 @homepage github.io
 -->
 <link rel="import" href="core-xhr.html">
-<polymer-element name="core-ajax" hidden attributes="url handleAs auto params response error method headers body contentType withCredentials progress loading">
+<polymer-element name="core-ajax" hidden attributes="url handleAs auto params response error method headers body contentType withCredentials basicUser basicPassword progress loading">
 <script>
 
   Polymer('core-ajax', {
@@ -204,6 +204,24 @@
      */
     withCredentials: false,
 
+    /**
+     * User name for basic authorization
+     *
+     * @attribute basicUser
+     * @type string
+     * @default null
+     */
+    basicUser: null,
+
+    /**
+     * Password for basic authorization
+     *
+     * @attribute basicPassword
+     * @type string
+     * @default null
+     */
+    basicPassword: null,
+
     /**
      * Additional properties to send to core-xhr.
      *
@@ -389,6 +407,10 @@
         args.responseType = this.handleAs;
       }
       args.withCredentials = this.withCredentials;
+      if (this.basicUser || this.basicPassword) {
+        args.headers['Authorization'] = 'Basic ' + btoa((this.basicUser || '') + ':' +
+          (this.basicPassword || ''));
+      }
       args.callback = this.receive.bind(this);
       args.url = this.url;
       args.method = this.method;