When I designed this, I made a conscious decision to use GET requests rather than POST requests. I'm not convinced this was the correct approach and I need to further think through the pros and cons. It probably makes little difference in the implementation but would ensure that sensitive data can be transmitted this way. I'm having trouble picturing when a system like this would pass sensitive data as a parameter, but I supposed it could happen.
When I designed this, I made a conscious decision to use GET requests rather than POST requests. I'm not convinced this was the correct approach and I need to further think through the pros and cons. It probably makes little difference in the implementation but would ensure that sensitive data can be transmitted this way. I'm having trouble picturing when a system like this would pass sensitive data as a parameter, but I supposed it could happen.