When invoking the Tooling API, is there a way to pass the Session Id using just URL parameters?
I've seen a couple of Salesforce APIs that work when the Session Id is contained in a URL parameter:
This works with the Identity URL:
This works with Frontdoor.jsp for logging into Salesforce:
Now I'm looking at the Tooling API which contains several GET-accessible operations, including Execute Anonymous (I appreciate the risk of this) and wondering if there is a way to do:
There are some docs on using the access token that seem to indicate the Identity URL might be a special case where that was permitted, else it must go in an header (for REST) or body (for SOAP).
Any ideas that don't use headers? RFC 3986
https://username:password@ was a non starter ;-)