I'm using angular as my frontend to do a login panel and send a post request to the backend which is a express API. My domain has a SSL already, so the safety between the transfer should be good.
But I'm wondering when I open the devtool and check the request payload, the plaintext of the loginname and password is show up.
Do I need to encrypt the payload before sending post request to make it invisible? If needed, what library I can use for this?