Sending username and password in REST POST request, request body VS HTTP header

Question

I am using HTTPS to send REST POST request for username and password, where do I need to put username and password? in POST request body, or HTTP header? Thanks.