PowerBI OData service error over HTTPS

GrumpyCoder · ‎09-23-2022

Hi dear PowerBI community members,

I am a developper working on an c#, .net6 aspnetcore application for a customer.
I have developped a specific OData service controller for my application with basic authentication support.
The OData service is accessible in REST and works fine with authentication and HTTPS support from the browser (Firefox) ,
but whenever I test it from PowerBI desktop, I have a 404 error that pops up and HTTPS seems to be ignored:
I made some network traces with wireshark and discovered that the network packets are sent over HTTP without TLS encryption and with authentification fields in clear text although I did specify HTTPS in my service URL (see attached screen captures).

I also did test my service in HTTP and basic authent during development and it worked fine, however I cannot install a service with such security breach for my customer.

I cannot find a way to go through this and would greatly appreciate any help, ideas or comments.

PowerBI Desktop version is 2.109.782.0 64-bit (September 2022)

(Followup)
Enabling traces in Diagnostic options gave me a log file where the switch between https to http clearly appears in PowerBI.Mashup traces, between the call Engine.IO.OData.GetResponseStream and Engine.IO.Data.Request.
Do anyone know where I could dig further ?
Is MashupContainer code open source (and where , I did not find it on github) ?
Where could I report this to Microsoft (I have the feeling that this is a bug, and even with incorrect parameters, sending credentials in clear text over the network a security concern) ?

Thank you for your help,

Alain