Commit 28841241745bdc30be0ef78235f3c4ba38345590

Edward Thomson 2021-08-05T08:12:28

http: don't require a password Attempt authentication when a username is presented but a password is not; this can happen in particular when users are doing token authentication and specifying the token in the URL itself. For example, `https://token@host/` is a valid URI and should be treated as a username of `token` with an empty password.