securing a web application using tokens in the header [closed]

Hi security and how people hack is not something, I know a lot about. I have implemented a simple authorization. Where a request to a service is only allowed if in the header there is a JSTLToken, that contains the correct id information. I am thinking is there the possibility of intercepting requests, and extracting all the header information.