Remove login information from update request
Removed the username and password in the GET /update request. The endpoint does not require authentication and it is unsafe to transmit login credentials over GET requests.
This commit is contained in:
parent
a7bc64d61e
commit
269937ff09
@ -375,15 +375,6 @@ class SelfossApi(
|
|||||||
appSettingsService.getBasicPassword().isNotEmpty()
|
appSettingsService.getBasicPassword().isNotEmpty()
|
||||||
) {
|
) {
|
||||||
headers {
|
headers {
|
||||||
append(
|
|
||||||
HttpHeaders.Authorization,
|
|
||||||
constructBasicAuthValue(
|
|
||||||
BasicAuthCredentials(
|
|
||||||
username = appSettingsService.getBasicUserName(),
|
|
||||||
password = appSettingsService.getBasicPassword(),
|
|
||||||
),
|
|
||||||
),
|
|
||||||
)
|
|
||||||
append(
|
append(
|
||||||
HttpHeaders.Accept,
|
HttpHeaders.Accept,
|
||||||
"text/event-stream",
|
"text/event-stream",
|
||||||
|
Loading…
x
Reference in New Issue
Block a user