Hide credentials of simple auth in display

[abishai]

I think, that it would be nice to hide credentials part of ZM url (like https://login:[email protected]), like browsers do. Trivial fix can be just astericks.

[pliablepixels]

Browsers hide it in the input field, like zmNinja does. Not while sending it over the wire.

[abishai]

But zmNinja doesn't. Well, at least I see password in url.

[pliablepixels]

You can't hide the password in basic auth if its part of the URL.
You are likely confusing what you see on the screen (stars) vs. what is sent on the network

If you send user:***@foo.com as basic auth, the password cannot be interpreted. No browser does this either

[abishai]

Well, ofc, I'm asking to mask it cosmetically.
Now, in ZM portal url (and for cgi-bin and api) we can see full url, with login and password.

[pliablepixels]

done