login.do XSUAA credential visible in network call

[karthiheyan_murugesan1]

Hi,

When we enable authentication for ui5 or CAP Service by XSUAA instance - app router - authentication method as route.

Then the password is visible in form data for login.do network call. Is this the expected behavior ?. If not how to encrypt this ?.

Thanks

[gregorw · Accepted solution]

The password is visible to you in the browser developer tool. But from your browser to the server it is encrypted as the https is used.

[karthiheyan_murugesan1 · Accepted solution]

Thanks Gregor Wolf.