If it is public let EVERYONE see it just with the URL (without any restriction) about microbin HOT 2 OPEN

I agree, creating a paste should (could) require a password (upload password), but once you get the URL, you should be able to read the contents unless it is encrypted with a password. All other restrictions should still apply (burn after reading, expire time).

I guess basic-authentication is not very useful for a pastebin type of service, which makes it a confusing option and it doesn't work for receivers of the URL, with whom you don't want to share your authentication.

My suggestion would be:

• remove basic authentication entirely (I don't see a use case for it)
• when set, use upload password to restrict adding paste's or uploaded files

Optionally, having user accounts with permissions to add pastes/uploads would be useful in more complicated setups.

from microbin.

Same use case for me.
I'm surprised this is not the default behavior indeed.
I would like :

• All URLs to be password protected ("/admin", "/", "/list")
• EXCEPT (at least) "/upload" and "/raw" = the one allowing to view the content of what has been uploaded

In order to have an instance "not usable by everyone" (but only usable by whoever has the password / is registered) but still to be able to have 100% public uploads.

from microbin.