It doesn't seem like ktor client correctly support...
# ktor
d
It doesn't seem like ktor client correctly supports
user:password@
URLs. I would expected
<http://username:password@example.com>
to set the Authentication: Basic header. I can create my own provider to do this, but it seems like it should work "out of the box"
Also, it seems like the URL gets logged in a few places. When its logged, the user/pass should probably be redacted.
h
This form is discouraged because the credentials are part of the nonencrypted url. Use the header because it is encrypted.
d
It’s not sent unencrypted though, since it’s https. I have changed how I’m setting the auth, but it is surprising that those fields exist but aren’t properly supported.