• ItsMyFirstDay@lemmy.world
    link
    fedilink
    arrow-up
    10
    ·
    1 year ago

    I’m not 100% on this but I think GET requests are logged by default.

    POST requests, normally used for passwords, don’t get logged by default.

    BUT the Uri would get logged would get logged on both, so if the URI contained @username:Password then it’s likely all there in the logs

    • SzethFriendOfNimi@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      1 year ago

      Get and post requests are logged

      The difference is that the logged get requests will also include any query params

      GET /some/uri?user=Alpha&pass=bravo

      While a post request will have those same params sent as part of a form body request. Those aren’t logged and so it would look like this

      POST /some/uri