Badges
Accepted Solutions
Likes Received
Posts
Discussions
Ideas
Blog Posts
This has been added to the documentation and is now officially supported. This can now be closed out, I don't see a way to do it.
In my experience, the Munchkin documentation in various places (which are easily searched and found) is causing some people to be confused.It looks like Munchkin used to have a jQuery dependency, which it no longer has. At least, I don't see it loading at all in any case in testing.In this document ...
The RFC for OAuth 2.0 is pretty clear:https://tools.ietf.org/html/rfc6749#section-3.2 Since requests to the token endpoint result in the transmission of clear-text credentials (in the HTTP request and response), the authorization server MUST require the use of TLS as described in Section 1....
I've seen many customers have a security review that comes back flagging the use of GET on the API and putting client id and secret on the URL. Apparently people are somehow convinced that that's "in public".https://developers.marketo.com/rest-api/authentication/#using_an_access_tokenhttps://develop...
Sanford,Could I bring you in pro bono to back me up in meetings, especially with enterprise clients? You could back up things I say about security, and you could probably also help with the 400 meetings that will happen when you try to get a proxy set up within a large company's infrastructure, eith...
Sanford -I'll just say that whenever we work with clients, particularly larger ones, this kind of solution almost always results in a no-go. We can't provide that on our AWS for our clients because security people don't like it/won't have it. If we suggest this to clients, even if they have AWS, man...
Highly needed!
I created an idea for this here:https://nation.marketo.com/t5/Ideas/Webhooks-support-additional-methods-PUT-DELETE/idi-p/312235since we have the same need. Upvote it if you want the additional method support, if it gets enough votes maybe it'll happen.
There are many integrations out there and many of them now expect that people can call REST endpoints with the proper method.As an example, we have an integration right now where we can POST to create a person in another system, which returns an ID. Ideally, we would like to PUT to the user record t...
I'd personally love to see this, I just ran into this where we were hoping to do a pretty great integration with something, and it requires PUT for updates and we can't call it even with ?_method=PUT