Why does DIGIT supports only POST requests?

[atulgupta2024]

While working on PUCAR, I had designed a few GET APIS, only to realize that the authentication token is being passed in the body of the post and not the header. Passing authorization tokes in request header is a standard technique.

Any reason why we don't support that and rather pass the tokens in the request body?

[subhashini-egov]

@atulgupta2024 here is a document that was shared by some of the earliest architects of DIGIT that explains the reasoning. Largely, it was to stay protocol independent.