Can someone explain how http: // user: pass@host.com authentication works ? If the browser sends a header Authorizationwith user:passin base-64 encoded?
Authorization
user:pass
I opened the Net console in the Chrome developer tools, and when I make a request, for example http://user:pass@stackoverflow.com, I do not see the header added Authorization.
http://user:pass@stackoverflow.com
I'm really curious how the browser sends the password if I use user:pass@before the url.
user:pass@
, , . Authorization, , , ( ).
HTTP- :
Authorization. WWW-Authenticate, , . ( , , )
WWW-Authenticate
Authorization. user:pass base64, :
Authorization: Basic dXNlcjpwYXNz
, https. -, WWW-Authenticate, Authorization .:)