c# - Basic Auth in URL, no authorization header in http context -
i'm trying allow users hit endpoint basic auth using url username:password@myurl.com\endpoint
.
however, when check httpcontext authorization header while debugging, it's null. it's possible i'm misunderstanding how works, under impression having username:password@
implies basic auth , attaches header?
it's not practice allow users pass basic authentication parameters in url
please read following understand why rfc2617
Comments
Post a Comment