zulhfreelancer said about 8 years ago on Rails API - Authentication with JWT :

Thanks. What do you mean by this?

"...Unless the form is posted to an endpoint over SSL, the password would also be sent over plaintext."

I'm not quite get it.