From 3e40b4db50dc11d4168819dd3c687d9f4664985d Mon Sep 17 00:00:00 2001
From: "Nolann B." <100787331+nolannbiron@users.noreply.github.com>
Date: Tue, 18 Nov 2025 20:18:59 +0100
Subject: [PATCH] Fix OpenAPI basic auth placeholder (#3816)

---
 .changeset/ready-ducks-burn.md                   | 5 +++++
 packages/react-openapi/src/OpenAPICodeSample.tsx | 7 ++++---
 2 files changed, 9 insertions(+), 3 deletions(-)
 create mode 100644 .changeset/ready-ducks-burn.md

diff --git a/.changeset/ready-ducks-burn.md b/.changeset/ready-ducks-burn.md
new file mode 100644
index 000000000..ab438a588
--- /dev/null
+++ b/.changeset/ready-ducks-burn.md
@@ -0,0 +1,5 @@
+---
+'@gitbook/react-openapi': patch
+---
+
+Fix OpenAPI basic auth placeholder
diff --git a/packages/react-openapi/src/OpenAPICodeSample.tsx b/packages/react-openapi/src/OpenAPICodeSample.tsx
index 68e6e427d..5287d4fe8 100644
--- a/packages/react-openapi/src/OpenAPICodeSample.tsx
+++ b/packages/react-openapi/src/OpenAPICodeSample.tsx
@@ -315,11 +315,12 @@ function getSecurityHeaders(args: {
         switch (security.type) {
             case 'http': {
                 let scheme = security.scheme;
+                const defaultPlaceholderValue = scheme?.toLowerCase()?.includes('basic')
+                    ? 'username:password'
+                    : 'YOUR_SECRET_TOKEN';
                 const format = resolvePrefillCodePlaceholderFromSecurityScheme({
                     security: security,
-                    defaultPlaceholderValue: scheme?.includes('basic')
-                        ? 'username:password'
-                        : 'YOUR_SECRET_TOKEN',
+                    defaultPlaceholderValue,
                 });
 
                 if (scheme?.includes('bearer')) {