Let Tinyproxy Authenticate to Its Parent Proxy
Use Tinyproxy's upstream credential syntax instead of manually adding a reusable Proxy-Authorization header.
Upstream http proxyuser:[email protected]:8080Use this upstream credential form only on a supporting installed Tinyproxy release, replacing the example secret and protecting its configuration.
BasicAuth validates clients of Tinyproxy. The Upstream account authenticates Tinyproxy to the parent. Neither replaces the other, and a parent login does not authorize arbitrary callers of the local listener.
Adding Proxy-Authorization through AddHeader is a fragile substitute: that outgoing-header feature is documented not to work the same way for HTTPS. A Base64 Basic value remains a usable encoded credential, not a password hash.
Match the parent's supported authentication method. A copied Basic header cannot negotiate another scheme. On failure, identify which hop returned 407 before changing an account.