Is the password supposed to be visible in the form data?

[wira-putra]

Hi everyone,
I have tried authentication example in https://aminalaee.dev/sqladmin/authentication/, but when I use 'inspect' in the browser at /admin/login, the form data (including the password) is visible.

Is it normal or a bug? If so, maybe we should note it in the docs for security concern.

Thank you in advance

[aminalaee]

Hey,

Thanks. Yes I think it's very normal and expected to send plain text password in POST body as most other tools do.
But I think it's worth mentioning that HTTPS is recommended to be used with authentication.

Feel free to update the docs with a PR.