For /data-access-api/auth, accept POST, not GET

EDRN / labcas-backend

Laboratory Catalog and Archive Service (LabCAS) Backend

Apache License 2.0

0 stars 1 forks source link

Closed nutjob4life closed 4 months ago

nutjob4life commented 5 months ago

Robert Solorio says /data-access-api/auth cannot accept GET requests, even though the credential is base64-encoded.

Instead, it must only use POST requests, where the credential is plainly visible.

Because "reasons" 🤔

nutjob4life commented 4 months ago

This is live in production now