Comment Comment by cess11 If a service is sending auth tokens as URL parameters, stop using it. Those are always public. parent cess11 8 months ago