# Basic Auth Memory Storage

**URL:** <https://discourse.nodered.org/t/basic-auth-memory-storage/52476>\
**Category:** General\
**Tags:** http-request, security\
**Created:** [20 October 2021 16:01 UTC](https://discourse.nodered.org/t/basic-auth-memory-storage/52476 "2021-10-20T16:01:49Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hannahisme2533](https://avatars.discourse-cdn.com/v4/letter/h/50afbb/32.png) [@Hannahisme2533](https://discourse.nodered.org/u/Hannahisme2533)\
**Post date:** [20 October 2021 16:01 UTC](https://discourse.nodered.org/t/basic-auth-memory-storage/52476/1 "2021-10-20T16:01:49Z")

</div>

Hello!

I'm not really sure where exactly to ask this, but I've been trying to learn more about the security around http-request nodes. Right now, I use a username and password in the http request node for basic auth. I just wanted to know if this information were saved anywhere? I've read about "httpAdminAuth", "AdminAuth", and "httpNodeAuth", but there doesn't seem to be a lot of documentation about them anywhere. If anyone could give me a bit more information, that'd be really helpful!

Thank you! 😄

---

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [20 October 2021 16:13 UTC](https://discourse.nodered.org/t/basic-auth-memory-storage/52476/2 "2021-10-20T16:13:28Z")

</div>

Hi @Hannahisme2533 - welcome to the community!

The username and password you enter in the HTTP Request node are handled as 'credentials' in your flow. That means they do not get stored in your main flow file, but get stored in a separate credentials file that sits next to your flows file. The credentials file is, by default, encrypted so that they are not stored in plain text.

The other things you mention (`adminAuth` etc) are about securing the Node-RED editor itself - rather than anything to do with what the flows are doing.

Hope that helps - happy to clarify any part I've not explain well.

---

<div class="post-metadata">

**Author:** ![Hannahisme2533](https://avatars.discourse-cdn.com/v4/letter/h/50afbb/32.png) [@Hannahisme2533](https://discourse.nodered.org/u/Hannahisme2533)\
**Post date:** [20 October 2021 20:03 UTC](https://discourse.nodered.org/t/basic-auth-memory-storage/52476/3 "2021-10-20T20:03:21Z")

</div>

Thank you! I know that the default MQTT node has a separate configuration node associated with it where it stores things, and it allows the node to be, say, copied and pasted (or exported/imported etc) and continue to hold the credentials. Is there any possible way to do this for the http request node?

---

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [20 October 2021 20:05 UTC](https://discourse.nodered.org/t/basic-auth-memory-storage/52476/4 "2021-10-20T20:05:59Z")

</div>

No, the HTTP Request node doesn't have a config node associated with it.

The fact node's don't keep their credentials when copying/import/exporting is a security policy we have - it means you can't accidentally share your credentials when sharing your flow.

It can, however, be inconvenient when you really do want to take a copy with the credentials in. We do have an item on the backlog to do something in this area.

---

<div class="post-metadata">

**Author:** ![Hannahisme2533](https://avatars.discourse-cdn.com/v4/letter/h/50afbb/32.png) [@Hannahisme2533](https://discourse.nodered.org/u/Hannahisme2533)\
**Post date:** [20 October 2021 20:07 UTC](https://discourse.nodered.org/t/basic-auth-memory-storage/52476/5 "2021-10-20T20:07:04Z")

</div>

Oh, alright! I figured as much but being sure is always better than guessing, so thank you so much! You've been a great help 😄

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [3 November 2021 20:07 UTC](https://discourse.nodered.org/t/basic-auth-memory-storage/52476/6 "2021-11-03T20:07:51Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.