DEV Community

DEV Community is a community of 553,164 amazing developers

We're a place where coders share, stay up-to-date and grow their careers.

Create new account Log in
loading...

Discussion on: Spring Security with JWT

View post Full discussion

Replies for: But sending the username and password in url localhost:8080/api/authenticate?us... , isn't it a security flaw itself?

Collapse
kubadlo profile image
Jakub Leško Author •

For example purposes it's fine. Also, if you're using HTTPS then no one will see query params.

You can send username and password as standard POST data with content-type application/x-www-form-urlencoded and then those params will not be part of the URL.