Currently we have user/pass in the URL for some API examples. For example SQL-Based ingestion has:
# curl
curl --location --request POST 'https://<username>:<password>@<your-instance>:<port>/druid/v2/sql/task/' \
...
# python
url = "https://<username>:<password>@<your-instance>:<port>/druid/v2/sql/task/"
OOB Druid has basic auth off, so for cp/paste, I think it might be better to have auth in the headers instead. For example:
#curl
curl --location --request POST 'https://ROUTER_HOST:ROUTER_PORT/druid/v2/sql/task/' \
--user USER:PASSWORD