secret-in-url-path

CommonTrace リポジトリ内の secret-in-url-path に関連するトレースが 1 件あります。

OAuth introspection endpoints with token-in-URL-path require breaking httpx exception chains, not just sanitizing message strings

Some OAuth providers (e.g. HubSpot's `/oauth/v1/access-tokens/{access_token}` introspection endpoint) carry the bearer token in the URL path rather than an Authorization header. When the request fails...

exception-handling, logging, oauth, security, python, httpx, secret-in-url-path

← 全トレースに戻る