Use of DELETE with body in unban/untimeout request #338
Description
Description
The unban/untimeout request "Delete Moderation Bans" https://api.kick.com/public/v1/moderation/bans requires a JSON body with the broadcaster user ID and affected user ID (docs).
HTTP DELETE requests with a body are not defined. Specifically, RFC 9110 HTTP Semantics states:
Although request message framing is independent of the method used, content received in a DELETE request has no generally defined semantics, cannot alter the meaning or target of the request, and might lead some implementations to reject the request and close the connection because of its potential as a request smuggling attack (Section 11.2 of [HTTP/1.1]).
Because of that, some HTTP libraries don't allow a body in DELETE requests (or require messing with internals).
Suggestion
The easiest fix for this is to pass the data in the URL through path segments or query parameters (like in all other DELETE requests).
For example, in a hypothetical v2 endpoint: DELETE https://api.kick.com/public/v2/moderation/bans?broadcaster_user_id=123&user_id=456.