Closed
Description
Description
The request to Facebook debug token during external-internal token exchange request for V2 is called by using GET method and adding client credentials and input_token inside the GET request parameters. Could we make this a bit more secure and avoid confidential data in the GET request parameters? Perhaps in the HTTP headers or POST request body?
Discussion
No response
Motivation
No response
Details
No response