I talked with mlassau about what could be done to move to removing support for os_username and os_password in url parameters. We came up with the following plan:
1. change the existing code to by default not with url parameter values for os_username & os_password and release a new (minor version is okay) of seraph.
2. add a means to re-enable url parameter values for os_username & os_password such that applications can enable/disable support for it.
- causes
-
SER-201 NPE when request.getQueryString() is null
- RESOLVED
-
JRACLOUD-65287 The the os_username parameter has been blocked but it is still used in the users onboarding notifications
- Closed
- is related to
-
JRASERVER-38548 Remove url parameter support for os_username, os_password
- Closed
- relates to
-
SER-194 Remove support for os_username, os_password and os_cookie
- Open
- links to