The forms in which a server may echo the credentials of a userinfo (user:password,
as credentialsIn returns it) back in an error body: the Authorization: Basic
value (base64 of the decoded user:password, UTF-8 as the engine sends it), the
decoded user:password itself, and the password alone when it is at least 4
characters long. [] for a userinfo without a password. None of them has an @ to
anchor on, so they are replaced as exact strings (redactSecrets).
The forms in which a server may echo the credentials of a userinfo (
user:password, as credentialsIn returns it) back in an error body: theAuthorization: Basicvalue (base64 of the decodeduser:password, UTF-8 as the engine sends it), the decodeduser:passworditself, and the password alone when it is at least 4 characters long.[]for a userinfo without a password. None of them has an@to anchor on, so they are replaced as exact strings (redactSecrets).