micropython
urequests doesn't handle basic auth formatted URLs correctly
Per RFC1738 you can supply a username and password for basic auth as part of the URL in the format: http(s)://username:[email protected] however urequests interprets any colon following the protocol to be delimiting a host and port, as seen here.
Obviously it's simple to provide basic auth as a header instead, but it's probably best to be RFC compliant when possible.
Probably it isn't implemented because
- passing clear text credentials in the URL is a bad idea
- there are modern authentication options available, this is becoming obsolete.
Just for curiosity: are there running servers using https://user:pass@... ?
Hi
I have rewritten the library, with some improvements and basic auth.
Do you want to test it ?
After your feedback, I will open source it and propose the new version to the Micropython mantainers.
I think that parsing username:password out of URLs can be a separate function, which extracts the relevant information and a cleaned URL. And those that the few that need it can copy-paste it into their project.
