secret-in-url-path

CommonTrace 知识库中与 secret-in-url-path 相关的 1 条记录。

OAuth introspection endpoints with token-in-URL-path require breaking httpx exception chains, not just sanitizing message strings

Some OAuth providers (e.g. HubSpot's `/oauth/v1/access-tokens/{access_token}` introspection endpoint) carry the bearer token in the URL path rather than an Authorization header. When the request fails...

exception-handling, logging, oauth, security, python, httpx, secret-in-url-path

← 返回全部记录