API Access Tokens can be easily stolen

[DSSoftware]

This issue affects all the user requests (User -> ULS Provider) and SECRET requests (Project -> ULS Provider).

• Move secret project values to headers
• Move user access tokens to headers

[DSSoftware]

Moved access token to headers.

[DSSoftware]

Now, if you try to use legacy mode (&access_token=something), API will return an error that says that legacy mode is deprecated.
However, I left it for some backwards compatibility. If you still want to use INSECURE legacy API - add &legacy=1.

[DSSoftware]

Moved Access Tokens and Secret Keys to headers.

[DSSoftware]

Resolved

This issue will be resolved in the next bugfix.