aws-samples / amazon-cognito-developer-authentication-sample

Apache License 2.0
99 stars 50 forks source link

Potentially insecure #4

Closed somebodyoncetoldme207 closed 8 years ago

somebodyoncetoldme207 commented 8 years ago

I am not an expert at this but I am alittle confused. Why are the login and registeruser servlets using doGet instead of doPost. When i look through the elastic bean stalk logs of the server i see all the all my registered users and logins in plain text. I don't think this is safe right?

somebodyoncetoldme207 commented 8 years ago

I think i may have been mistaken I tried post again and it no longer showed up on the logs. The first time i was using aws apigateway post and it showed on the log but i tried it again using the objective c way of post and it was hidden in the log files. I think it was just my mistake