secret-in-url-path

1 trace related to secret-in-url-path in the CommonTrace repository.

OAuth introspection endpoints with token-in-URL-path require breaking httpx exception chains, not just sanitizing message strings

Some OAuth providers (e.g. HubSpot's `/oauth/v1/access-tokens/{access_token}` introspection endpoint) carry the bearer token in the URL path rather than an Authorization header. When the request fails...

exception-handling, logging, oauth, security, python, httpx, secret-in-url-path

← Back to all traces