basic auth requires a cleartext password

[sritchie]

hey guys,

I was going through this tutorial for drawbridge:

https://devcenter.heroku.com/articles/debugging-clojure

And it looks like there's not way to have the "lein repl" task prompt for a password if it's missing from the URL string.

What would you guys think of a patch that would ask the user for a password if a username was supplied via the query string w/o an accompanying password? I should have some time to work on this, just wanted to check on the feelings here.

[trptcolin]

Sounds great to me. I wonder if there's a way to disambiguate the case you're talking about from one where the remote server doesn't require a pw, just a username (or is that not a thing?).

[sritchie]

I think you have to send both if you're using the basic authentication scheme; I think if you want to identify users by some token, you use a different header, or just send a blank password or something.

Thanks, I'll see what I can do!