Guzzle似乎从请求url中剥离了密码部分

use GuzzleHttp\Client;

$client = new Client([
    'base_uri' => 'https://example.com',
    'verify' => false,
]);

$response = $client->request('GET', '/api', [
    'query' => ['param' => 'value'],
    'headers' => ['Authorization' => 'Bearer token'],
    'with_credentials' => true,
]);

use GuzzleHttp\Client;

$client = new Client();

$url = 'https://username:password@example.com/api';
$response = $client->request('GET', $url);

use GuzzleHttp\Client;

$client = new Client();

$response = $client->request('GET', 'https://example.com/api', [
    'auth' => ['username', 'password'],
]);