{"action":"created","issue":{"url":"https://api.github.com/repos/dotnet/corefx/issues/3307","labels_url":"https://api.github.com/repos/dotnet/corefx/issues/3307/labels{/name}","comments_url":"https://api.github.com/repos/dotnet/corefx/issues/3307/comments","events_url":"https://api.github.com/repos/dotnet/corefx/issues/3307/events","html_url":"https://github.com/dotnet/corefx/pull/3307","id":107149771,"number":3307,"title":"Allow UseDefaultCredentials property for HttpClientHandler on unix","user":{"login":"kapilash","id":113322,"avatar_url":"https://avatars.githubusercontent.com/u/113322?v=3","gravatar_id":"","url":"https://api.github.com/users/kapilash","html_url":"https://github.com/kapilash","followers_url":"https://api.github.com/users/kapilash/followers","following_url":"https://api.github.com/users/kapilash/following{/other_user}","gists_url":"https://api.github.com/users/kapilash/gists{/gist_id}","starred_url":"https://api.github.com/users/kapilash/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kapilash/subscriptions","organizations_url":"https://api.github.com/users/kapilash/orgs","repos_url":"https://api.github.com/users/kapilash/repos","events_url":"https://api.github.com/users/kapilash/events{/privacy}","received_events_url":"https://api.github.com/users/kapilash/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/dotnet/corefx/labels/2%20-%20In%20Progress","name":"2 - In Progress","color":"CCCCCC"},{"url":"https://api.github.com/repos/dotnet/corefx/labels/cla-already-signed","name":"cla-already-signed","color":"009800"},{"url":"https://api.github.com/repos/dotnet/corefx/labels/System.Net","name":"System.Net","color":"d4c5f9"},{"url":"https://api.github.com/repos/dotnet/corefx/labels/X-Plat","name":"X-Plat","color":"fbca04"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":9,"created_at":"2015-09-18T07:37:54Z","updated_at":"2015-09-18T17:04:25Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/dotnet/corefx/pulls/3307","html_url":"https://github.com/dotnet/corefx/pull/3307","diff_url":"https://github.com/dotnet/corefx/pull/3307.diff","patch_url":"https://github.com/dotnet/corefx/pull/3307.patch"},"body":""},"comment":{"url":"https://api.github.com/repos/dotnet/corefx/issues/comments/141508411","html_url":"https://github.com/dotnet/corefx/pull/3307#issuecomment-141508411","issue_url":"https://api.github.com/repos/dotnet/corefx/issues/3307","id":141508411,"user":{"login":"davidsh","id":7684835,"avatar_url":"https://avatars.githubusercontent.com/u/7684835?v=3","gravatar_id":"","url":"https://api.github.com/users/davidsh","html_url":"https://github.com/davidsh","followers_url":"https://api.github.com/users/davidsh/followers","following_url":"https://api.github.com/users/davidsh/following{/other_user}","gists_url":"https://api.github.com/users/davidsh/gists{/gist_id}","starred_url":"https://api.github.com/users/davidsh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/davidsh/subscriptions","organizations_url":"https://api.github.com/users/davidsh/orgs","repos_url":"https://api.github.com/users/davidsh/repos","events_url":"https://api.github.com/users/davidsh/events{/privacy}","received_events_url":"https://api.github.com/users/davidsh/received_events","type":"User","site_admin":false},"created_at":"2015-09-18T17:04:25Z","updated_at":"2015-09-18T17:04:25Z","body":"Using \"default\" credentials, i.e. the credentials of the currently logged on user (or service) is not about extracting the username/password in a clear-text fashion.  Windows does NOT extract the password for example.  It is not possible to be retrieved.  Only the cryptographic hash code of a password is ever stored in the system.  The actual plain text password is gone.\r\n\r\nSecurely passing the credentials of the logged on user is only possible with secure HTTP auth methods like Negotiate, NTLM, etc.  I'm not sure that non-Windows systems have a notion of allowing this.  \r\n\r\nLeaving this as a no-op is probably fine for now but we should try and understand what it means moving forward for the API surfaces that depend on it."}}