Sourced from hackney's releases.
1.25.0 - 2025-07-24
IMPORTANT CHANGE
change:
insecure_basic_authnow defaults totrueinstead offalseThis restores backward compatibility with pre-1.24.0 behavior where basic auth was allowed over HTTP connections. If you need strict HTTPS-only basic auth:
- Set globally:
application:set_env(hackney, insecure_basic_auth, false)- Or per-request:
{insecure_basic_auth, false}in optionsHex.pm : https://hex.pm/packages/hackney/1.25.0 Doc: https://hexdocs.pm/hackney/readme.html
Sourced from hackney's changelog.
1.25.0 - 2025-07-24
** IMPORTANT CHANGE **
change:
insecure_basic_authnow defaults totrueinstead offalseThis restores backward compatibility with pre-1.24.0 behavior where basic auth was allowed over HTTP connections. If you need strict HTTPS-only basic auth:
- Set globally:
application:set_env(hackney, insecure_basic_auth, false)- Or per-request:
{insecure_basic_auth, false}in options