Will depend on the API and how accessibility is specified. But "leaking" just isn't a problem if it returns 401 for username/password It is the same as for an internet variety absolutely? Just what exactly ought to we do when the user requests a web site that requires non-http authentication? https://safe-haven-assets85059.bloggip.com/37799376/a-secret-weapon-for-inflation-hedge