medium10 pts · first answer countsauthenticationapi-keyslogging
API key passed in the URL
A partner sends its API key as GET /v1/rates?api_key=sk_live_... . What is the main risk?
Discussion 0
Join free to post in the discussion.
Related questions
- How to store passwordsBackend Developer
- Why structured logs helpBackend Developer
- What HttpOnly does on a cookieBackend Developer
- Authentication versus authorizationBackend Developer
- What a password salt is forBackend Developer
- Is HTTP Basic auth encryptedBackend Developer
- Sending an access token to an APIBackend Developer
- What the Secure cookie flag doesBackend Developer