Why can I access the camera stream from motion without a password

[ICrashWindows12]

The stream is on port 8000 and the web interface is on port 8500

when I go localhost:8000 it asks for a password, but when I go localhost:8000/1/stream it shows the stream? like why? On AXIS cameras you cannot just go to the stream without a password even if you have the direct link?

ah so I see, if you go to localhost:8000 first, it asks for a password, but when you go after that localhost:8000/1/stream it asks for a password on the same tab, but on a new tab, I just type localhost:8000/1/stream it displays the stream, why does that happen?

[NiKiZe]

Check dev tools to see what is sent, otherwise make sure to use incognito tab, without giving password. In all other scenarios password is cached for future connections.