Hey guys is there any endpoint that we can hit to generate and update the access keys ,please anyone if you know about it please let me know??
Hey guys
Question: "We are currently authenticating with Casdoor by sending accessKey and accessSecret as query parameters to the /api/user endpoint, like so: /api/user?accessKey=exampleKey&accessSecret=exampleSecret. However, sending these keys as URL parameters seems insecure, as they could be exposed in network logs or browser history.
Is there a way to authenticate with Casdoor by sending accessKey and accessSecret in the request body instead? This approach would allow us to use a POST request and improve security. If this isn’t currently supported, are there any recommended workarounds?
@hsluoyz any solution for the above problem ? or anyone who can give me lead I'm new to casdoor and I'm stuck here..
sounds good to support it. Can you create a github issue? and a pull request would be even better?
@hsluoyz yes! thanks for addressing , I will create a git issue right now
Join the conversation
Sign up to reply, like and follow topics.
Suggested Topics
Want to read more? Browse other topics in Casdoor or view latest topics.
