Is the basic HTTP auth the only way to go with EventStore? I would have preferred something similar to how RavenDB works, where it uses Windows Authentication. I don’t mind HTTP auth as such, it’s just that it adds complexity and potential security issues to have passwords stored somewhere. In the config file, potentially committed to source control etc.
Cheers.