The bearer token authentication policy should reject URLs that are not HTTPS.

[ahsonkhan]

Similar to C++, .NET, and other language SDKs, consider adding validation that the scheme of the request URL within the bearer token authentication policy is HTTPS. Otherwise, fail.

azure-sdk-for-go/sdk/azcore/runtime/policy_bearer_token.go

Line 72 in 790fea5

func (b *BearerTokenPolicy) Do(req *policy.Request) (*http.Response, error) {

For example, see these:
https://github.com/Azure/azure-sdk-for-cpp/blob/35e42b99cfcc5b2797aa278a39694030732da2bc/sdk/core/azure-core/src/http/bearer_token_authentication_policy.cpp#L24-L28
https://github.com/Azure/azure-sdk-for-net/blob/e902ef5a2ed5db3d6104ccb2db29b97a02258634/sdk/core/Azure.Core/src/Pipeline/BearerTokenAuthenticationPolicy.cs#L115-L118