From 269937ff09fb3e86ed60ff49f3978ae9b7c8c1bc Mon Sep 17 00:00:00 2001 From: davidoskky Date: Sat, 12 Apr 2025 22:48:42 +0200 Subject: [PATCH] Remove login information from update request Removed the username and password in the GET /update request. The endpoint does not require authentication and it is unsafe to transmit login credentials over GET requests. --- .../bou/amine/apps/readerforselfossv2/rest/SelfossApi.kt | 9 --------- 1 file changed, 9 deletions(-) diff --git a/shared/src/commonMain/kotlin/bou/amine/apps/readerforselfossv2/rest/SelfossApi.kt b/shared/src/commonMain/kotlin/bou/amine/apps/readerforselfossv2/rest/SelfossApi.kt index 01b4be8..e989bfc 100644 --- a/shared/src/commonMain/kotlin/bou/amine/apps/readerforselfossv2/rest/SelfossApi.kt +++ b/shared/src/commonMain/kotlin/bou/amine/apps/readerforselfossv2/rest/SelfossApi.kt @@ -375,15 +375,6 @@ class SelfossApi( appSettingsService.getBasicPassword().isNotEmpty() ) { headers { - append( - HttpHeaders.Authorization, - constructBasicAuthValue( - BasicAuthCredentials( - username = appSettingsService.getBasicUserName(), - password = appSettingsService.getBasicPassword(), - ), - ), - ) append( HttpHeaders.Accept, "text/event-stream",