@Override
    public boolean equals(@Nullable Object o) {
        if (this == o) {
            return true;
        }
        if (!(o instanceof BasicToken)) {
            return false;
        }
        final BasicToken that = (BasicToken) o;
        // Note that we used '&' intentionally to make it hard to guess anything from timing.
        return secureEquals(username, that.username) &
               secureEquals(password, that.password);
    }
Returns the string that is sent as the value of the {@link HttpHeaderNames#AUTHORIZATION} header.
core/src/main/java/com/linecorp/armeria/common/auth/BasicToken.java