Allowed token detection methods to be defined in config file

[thetomcake]

trafficstars

My use case was that only Authorization: Bearer should be allowed and not token via a GET or POST parameter.

The requirement for this is to remove the risk of CSRF or use of cross origin requests with stolen or compromised tokens.

[sonarqubecloud[bot]]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information