c# - Basic Auth in URL, no authorization header in http context -


i'm trying allow users hit endpoint basic auth using url username:password@myurl.com\endpoint.

however, when check httpcontext authorization header while debugging, it's null. it's possible i'm misunderstanding how works, under impression having username:password@ implies basic auth , attaches header?

it's not practice allow users pass basic authentication parameters in url

please read following understand why rfc2617


Comments