credential_in_url
Copy page
Credential in URL: HTTP 400.
HTTP 400 · Credential in URL
MeaningLink to this section
A key or token appeared in the URL's query string, where server logs, proxies and browser history keep it.
FixLink to this section
Send the key in the Authorization header as Bearer <key>, and rotate the key you sent: treat it as exposed.
RetryLink to this section
The same call fails again until something changes.