Password is sent as 'null' instead of an empty string in Authorization header

[buchatsky]

Describe the bug
When AuthConfig.useHttpBasicAuth is set to true and AuthConfig.dummyClientSecret is not specified, the password value in client_id:password pair is 'null' instead of an empty string ''. At least it is so with Authorization code flow.
This causes the browser to popup a login prompt as a result to 401 server response (e.g. OpenIddict does not treat null password as an empty one).

Expected behavior
'client_id:' instead of 'client_id:null'

Additional context
angular-oauth2-oidc: 13.0.1

[jeroenheijmans]

Seems like a li'l bug to me indeed.

What happens if you set dummyClientSecret to '' (empty string) instead of leaving it null or unspecified? Doesn't that solve the issue?

[buchatsky]

@jeroenheijmans yes, setting dummyClientSecret to '' does work as a workaround

[manfredsteyer]

I'm setting the default value for dummyClientSecret beginning with v15.