This also happens with okhttp 3.2.0 (Android). Last working nginx version is 1.9.13, There I use basic authorization and add an Auth header with a network interceptor with credentials. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,266525,266707#msg-266707