Comment Comment by BillinghamJ It wasn't the app logging the PIN, was their AWS ELB setup.Two APIs were accepting the PIN as URL parameters on GET requests, since in terms of REST principles, the operations were to retrieve information.They were changed to non-GETs with the PIN sent in the body instead. The apps needed to be updated to switch to the new APIs. parent BillinghamJ 7 years ago
Two APIs were accepting the PIN as URL parameters on GET requests, since in terms of REST principles, the operations were to retrieve information.
They were changed to non-GETs with the PIN sent in the body instead. The apps needed to be updated to switch to the new APIs.