{"action":"closed","issue":{"url":"https://api.github.com/repos/cobalt-uoft/cobalt/issues/39","repository_url":"https://api.github.com/repos/cobalt-uoft/cobalt","labels_url":"https://api.github.com/repos/cobalt-uoft/cobalt/issues/39/labels{/name}","comments_url":"https://api.github.com/repos/cobalt-uoft/cobalt/issues/39/comments","events_url":"https://api.github.com/repos/cobalt-uoft/cobalt/issues/39/events","html_url":"https://github.com/cobalt-uoft/cobalt/issues/39","id":134878531,"number":39,"title":"Pass in API key via header instead of URL param","user":{"login":"arkon","id":4098258,"avatar_url":"https://avatars.githubusercontent.com/u/4098258?v=3","gravatar_id":"","url":"https://api.github.com/users/arkon","html_url":"https://github.com/arkon","followers_url":"https://api.github.com/users/arkon/followers","following_url":"https://api.github.com/users/arkon/following{/other_user}","gists_url":"https://api.github.com/users/arkon/gists{/gist_id}","starred_url":"https://api.github.com/users/arkon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/arkon/subscriptions","organizations_url":"https://api.github.com/users/arkon/orgs","repos_url":"https://api.github.com/users/arkon/repos","events_url":"https://api.github.com/users/arkon/events{/privacy}","received_events_url":"https://api.github.com/users/arkon/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2016-02-19T14:28:52Z","updated_at":"2016-02-19T17:54:37Z","closed_at":"2016-02-19T17:54:37Z","body":"Presently, API keys are passed in via the URL, like so:\r\n\r\n```\r\nhttps://cobalt.qas.im/api/1.0/buildings/080?key=API_KEY\r\n```\r\n\r\nIt's better to pass it in as the `Authorization` header of the HTTP request, so it isn't as easily exposed."}}