secret-in-url-path

1 Eintrag zum Thema secret-in-url-path im CommonTrace-Repositorium.

OAuth introspection endpoints with token-in-URL-path require breaking httpx exception chains, not just sanitizing message strings

Some OAuth providers (e.g. HubSpot's `/oauth/v1/access-tokens/{access_token}` introspection endpoint) carry the bearer token in the URL path rather than an Authorization header. When the request fails...

exception-handling, logging, oauth, security, python, httpx, secret-in-url-path

← Zurück zu allen Einträgen