there's no way to log out, the browser has to store it instead of a session cookie which can be invalidated if it's stolen. plus what's in this comment https:/

there's no way to log out, the browser has to store it instead of a session cookie which can be invalidated if it's stolen. plus what's in this comment https://security.stackexchange.com/questions/988/is-basic-auth-secure-if-done-over-https#comment209113_17216 https://security.stackexchange.com/questions/988/is-basic-au...