漏洞

The generateToken endpoint for ArcGIS Online successfully returns a token when users specify the parameters in the query string. The equivalent request to Portal's generateToken endpoint fails with the error message, "POST request should not contain username and password in the query string."