api_key_in_url
API key in URL · HTTP 400
When you get this error
The request had a key in the query string, as api_key or access_token. We always reject that, even if the key is valid.
What to do
Send the key in the Authorization: Bearer header. A key that has been in a URL may have ended up in logs; revoke it and create a new one.
Example
application/problem+json
{
"type": "https://developers.ledenboek.nl/errors/api_key_in_url",
"title": "API key in URL",
"status": 400,
"detail": "Send the key in the Authorization: Bearer header, not in the URL. A key in a URL ends up in logs and browser history; revoke this key to be safe.",
"instance": "/v2/members"
}The type field is the same in every language; title and detail follow Accept-Language. Build your error handling on type.