{"action":"created","issue":{"url":"https://api.github.com/repos/cloudfoundry/cf-java-client/issues/571","repository_url":"https://api.github.com/repos/cloudfoundry/cf-java-client","labels_url":"https://api.github.com/repos/cloudfoundry/cf-java-client/issues/571/labels{/name}","comments_url":"https://api.github.com/repos/cloudfoundry/cf-java-client/issues/571/comments","events_url":"https://api.github.com/repos/cloudfoundry/cf-java-client/issues/571/events","html_url":"https://github.com/cloudfoundry/cf-java-client/issues/571","id":181801406,"number":571,"title":"Consider sending token auth data via post body instead of uri parameters","user":{"login":"youngm","id":438661,"avatar_url":"https://avatars.githubusercontent.com/u/438661?v=3","gravatar_id":"","url":"https://api.github.com/users/youngm","html_url":"https://github.com/youngm","followers_url":"https://api.github.com/users/youngm/followers","following_url":"https://api.github.com/users/youngm/following{/other_user}","gists_url":"https://api.github.com/users/youngm/gists{/gist_id}","starred_url":"https://api.github.com/users/youngm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/youngm/subscriptions","organizations_url":"https://api.github.com/users/youngm/orgs","repos_url":"https://api.github.com/users/youngm/repos","events_url":"https://api.github.com/users/youngm/events{/privacy}","received_events_url":"https://api.github.com/users/youngm/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/cloudfoundry/cf-java-client/labels/unscheduled","name":"unscheduled","color":"D9D9D9"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-10-08T03:24:09Z","updated_at":"2016-10-10T13:20:11Z","closed_at":null,"body":"Currently it appears that in 2.0.1 the data sent to via post to /oauth/token sends it's data via url parameters instead of post body.\r\n\r\nThis exposes user and/or client credentials to uaa access logs, router access logs, and CF firehose HttpStartStop events to name a few.\r\n\r\nThoughts on sending this data via post body instead?"},"comment":{"url":"https://api.github.com/repos/cloudfoundry/cf-java-client/issues/comments/252616189","html_url":"https://github.com/cloudfoundry/cf-java-client/issues/571#issuecomment-252616189","issue_url":"https://api.github.com/repos/cloudfoundry/cf-java-client/issues/571","id":252616189,"user":{"login":"nebhale","id":60754,"avatar_url":"https://avatars.githubusercontent.com/u/60754?v=3","gravatar_id":"","url":"https://api.github.com/users/nebhale","html_url":"https://github.com/nebhale","followers_url":"https://api.github.com/users/nebhale/followers","following_url":"https://api.github.com/users/nebhale/following{/other_user}","gists_url":"https://api.github.com/users/nebhale/gists{/gist_id}","starred_url":"https://api.github.com/users/nebhale/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nebhale/subscriptions","organizations_url":"https://api.github.com/users/nebhale/orgs","repos_url":"https://api.github.com/users/nebhale/repos","events_url":"https://api.github.com/users/nebhale/events{/privacy}","received_events_url":"https://api.github.com/users/nebhale/received_events","type":"User","site_admin":false},"created_at":"2016-10-10T13:20:10Z","updated_at":"2016-10-10T13:20:10Z","body":"@youngm The [UAA docs](http://docs.cloudfoundry.com/uaa/#password-grant) are pretty explicit that this is the preferred way to acquire tokens.  Have you talked with that team about this concern?"}}
{"actor":{"display_login":"nebhale"}}