"BAD CSRF" when executing PUT using API, curl, and PHP

[blake (Blake Erickson)]

@brospars

Since when it’s mandatory ?
Didn’t find it in the changelog. I made a tool 2-3 years ago

@blake

Deprecation Warning!

On April 6th, 2020 we dropped support for all non-HTTP header based authentication (excluding some rss, mail-receiver, and ics routes). This means that API requests that have an api_key and api_username in the query params or in the HTTP body of the request will soon stop working.

Sorry about any issues this caused, we did do a slow roll out of this change and notified people the best we could, but its hard to catch every deprecation use.