I was looking at the api with my colleague @frodeaa and he pointed out that it might not be a good idea to have the card_token as a GET variable, since urls for requests are commonly logged, and then we end up with card_tokens that can be used for payments in our (or our customers) logs.
I was looking at the api with my colleague @frodeaa and he pointed out that it might not be a good idea to have the
card_token
as a GET variable, since urls for requests are commonly logged, and then we end up with card_tokens that can be used for payments in our (or our customers) logs.