Contrib.social

Change the Login API request.

Open on Drupal.org →
Created on 21 July 2023, 11 months ago
Updated 15 February 2024, 4 months ago

Problem/Motivation

For Orange Logic security recommendations, the Login API request must be changed to POST:

Orange Logic recommends that the Login and Password parameters are passed to the Login API using a POST request, as it provides increased security.

Proposed resolution

GET is changed to POST in the request:

try {
      $response = $this->httpClient->request(
        'POST',
        $token_endpoint,
        [
          'query' => [
            'Login' => $config->get('username'),
            'Password' => $config->get('password'),
          ],
        ]
      );
    }
📌 Task
Status

Fixed

Version

1.0

Component

Code

Created by

🇪🇸Spain ipitbiz

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.69.0 2024