I am referring a document from salesforce help at https://help.salesforce.com/articleView?id=users_login_history.htm&type=5 which reads below-
View the HTTP method used for the session login: POST, GET, or Unknown. You can use this information to determine if a user is inadvertently exposing user credentials through a GET request. For example, if a user entered a username and password on the login page, the HTTP method for login is a secure POST request. However, if the user logged in by providing the username and password in the URL as a GET request, the credentials are exposed. From Setup, enter Login History in the Quick Find box, then select Login History and view the HTTP Method column.
- Are we allowed to login to salesforce using REST Get? I don't find any Get approach, only thing I could find is Post. If such method exist then can any one provide documentation link or any further information.
- Even if such a get method exist then (and I missed it to find) then why salesforce has such thing at very first place. Isn't it like designing a trap and then monitor who all fall into that trap?