Repository navigation
auth token is seemingly in http querystring, even when using usePost(True) #226
Description
When using .publish and .usePost(True) we are still getting auth details in the querystring. It would seem this isn't appropriate. With minimal middleware from FastApi, this can lead to logging of (what I believe, but I could be wrong) auth tokens in the querystring. We'd like the use of post to post this sensitive information.
Activity
parfeon commentedon Oct 26, 2026
It is a bit late with response.
Only message is sent as POST body and the rest of parameters goes with
queryas it shown in REST API docs.The latest Python version has "sensitive data protection" for logging.
As for middleware I understand this is something installed on the server, which use PubNub SDK, so basically owner of the app - it doesn't look like leak of sensitive information.