fix: http basic authentication transmits credentials... in auth.go

[orbisai0security]

Summary

Fix high severity security issue in auth.go.

Vulnerability

Field	Value
ID	V-002
Severity	HIGH
Scanner	multi_agent_ai
Rule	V-002
File	auth.go:1

Description: HTTP Basic Authentication transmits credentials as Base64-encoded plaintext in the Authorization header (e.g., Authorization: Basic dXNlcjpwYXNz). Base64 is an encoding, not encryption — it provides zero confidentiality protection. No TLS enforcement was identified in the codebase: no RunTLS() call, no HTTPS redirect middleware, and no TLS configuration was confirmed. If the server accepts plain HTTP connections, any network-positioned attacker can intercept and decode credentials in seconds.

Changes

• auth.go
• auth_test.go

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.48%. Comparing base (3dc1cd6) to head (4b95dc0).
⚠️ Report is 275 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #4637      +/-   ##
==========================================
- Coverage   99.21%   98.48%   -0.73%     
==========================================
  Files          42       48       +6     
  Lines        3182     3767     +585     
==========================================
+ Hits         3157     3710     +553     
- Misses         17       48      +31     
- Partials        8        9       +1     

Flag	Coverage Δ
	?
--ldflags="-checklinkname=0" -tags sonic	98.47% <100.00%> (?)
-tags go_json	98.36% <100.00%> (?)
-tags nomsgpack	98.41% <100.00%> (?)
go-1.18	?
go-1.19	?
go-1.20	?
go-1.21	?
go-1.25	98.43% <100.00%> (?)
go-1.26	98.48% <100.00%> (?)
macos-latest	98.43% <100.00%> (-0.79%)	⬇️
ubuntu-latest	98.48% <100.00%> (-0.73%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.