{"action":"created","issue":{"url":"https://api.github.com/repos/strongloop/loopback/issues/1326","labels_url":"https://api.github.com/repos/strongloop/loopback/issues/1326/labels{/name}","comments_url":"https://api.github.com/repos/strongloop/loopback/issues/1326/comments","events_url":"https://api.github.com/repos/strongloop/loopback/issues/1326/events","html_url":"https://github.com/strongloop/loopback/issues/1326","id":70248108,"number":1326,"title":"Use Case: ability to disable that Access Tokens are accepted when in an URL","user":{"login":"OwenBrotherwood","id":866122,"avatar_url":"https://avatars.githubusercontent.com/u/866122?v=3","gravatar_id":"","url":"https://api.github.com/users/OwenBrotherwood","html_url":"https://github.com/OwenBrotherwood","followers_url":"https://api.github.com/users/OwenBrotherwood/followers","following_url":"https://api.github.com/users/OwenBrotherwood/following{/other_user}","gists_url":"https://api.github.com/users/OwenBrotherwood/gists{/gist_id}","starred_url":"https://api.github.com/users/OwenBrotherwood/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/OwenBrotherwood/subscriptions","organizations_url":"https://api.github.com/users/OwenBrotherwood/orgs","repos_url":"https://api.github.com/users/OwenBrotherwood/repos","events_url":"https://api.github.com/users/OwenBrotherwood/events{/privacy}","received_events_url":"https://api.github.com/users/OwenBrotherwood/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/strongloop/loopback/labels/Beginner%20Friendly","name":"Beginner Friendly","color":"00DD00"},{"url":"https://api.github.com/repos/strongloop/loopback/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-04-22T22:10:16Z","updated_at":"2015-04-28T19:22:34Z","closed_at":null,"body":"Use Case: \r\n- ability to disable that Access Tokens are accepted when in an URL\r\n- alternativly, possibility to enforce elsewhere as an alternative\r\n\r\nIt may be such that it is not possible to disable the use of Access Tokens when sent in an URL.\r\nAs to if one can enforce in a model is unknown.\r\n\r\nAddresses a case if the use of URL (or cookie) based Access Tokens are not allowed."},"comment":{"url":"https://api.github.com/repos/strongloop/loopback/issues/comments/97175373","html_url":"https://github.com/strongloop/loopback/issues/1326#issuecomment-97175373","issue_url":"https://api.github.com/repos/strongloop/loopback/issues/1326","id":97175373,"user":{"login":"OwenBrotherwood","id":866122,"avatar_url":"https://avatars.githubusercontent.com/u/866122?v=3","gravatar_id":"","url":"https://api.github.com/users/OwenBrotherwood","html_url":"https://github.com/OwenBrotherwood","followers_url":"https://api.github.com/users/OwenBrotherwood/followers","following_url":"https://api.github.com/users/OwenBrotherwood/following{/other_user}","gists_url":"https://api.github.com/users/OwenBrotherwood/gists{/gist_id}","starred_url":"https://api.github.com/users/OwenBrotherwood/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/OwenBrotherwood/subscriptions","organizations_url":"https://api.github.com/users/OwenBrotherwood/orgs","repos_url":"https://api.github.com/users/OwenBrotherwood/repos","events_url":"https://api.github.com/users/OwenBrotherwood/events{/privacy}","received_events_url":"https://api.github.com/users/OwenBrotherwood/received_events","type":"User","site_admin":false},"created_at":"2015-04-28T19:22:34Z","updated_at":"2015-04-28T19:22:34Z","body":"@bajtos \r\nI will probably try an option.noConcat around the concats.\r\nThis means specific enablement of type/value with enableAuthentication (also for previous default values)\r\n\r\nExposing the parameter that are used in enableAuthentication could also allow a better audit of a (future) loopback AAA model that contains the type and text used for tokens in the Authentication /Authorization\r\n\r\nEffected doc\r\n- http://docs.strongloop.com/display/public/LB/Introduction+to+User+model+authentication\r\n  -- investigate how set token works ie cookie/url/header ...\r\n- http://docs.strongloop.com/display/public/LB/Making+authenticated+requests"}}