Deprecation notice for GitHub SSO query param
I'm getting emails like this:
Hello there!
On February 7th, 2020 at 11:53 (UTC) your application (foss.heptapod.net) used an access token (with the User-Agent Faraday v0.12.2) as part of a query parameter to access an endpoint through the GitHub API.
Please use the Authorization HTTP header instead as using the
access_token
query parameter is deprecated.Depending on your API usage, we'll be sending you this email reminder once every 3 days for each token and User-Agent used in API calls made on your behalf. Just one URL that was accessed with a token and User-Agent combination will be listed in the email reminder, not all.
Visit https://developer.github.com/changes/2019-11-05-deprecated-passwords-and-authorizations-api/#authenticating-using-query-parameters for more information.
Thanks, The GitHub Team
There's probably some easy stuff to backport from current GitLab versions.
Following the links, I finally landed onto a blog post
Flagging for 0.9.0 because we'll me on more recent GitLab, making any backport easier, and it doesn't seem to be that urgent - the blog post says that there was no official timeline at this point, and I couldn't find any posted since then after a very short search