Remove login information from update request
Removed the username and password in the GET /update request. The endpoint does not require authentication and it is unsafe to transmit login credentials over GET requests.
This commit is contained in:
parent
a7bc64d61e
commit
269937ff09
@ -375,15 +375,6 @@ class SelfossApi(
|
||||
appSettingsService.getBasicPassword().isNotEmpty()
|
||||
) {
|
||||
headers {
|
||||
append(
|
||||
HttpHeaders.Authorization,
|
||||
constructBasicAuthValue(
|
||||
BasicAuthCredentials(
|
||||
username = appSettingsService.getBasicUserName(),
|
||||
password = appSettingsService.getBasicPassword(),
|
||||
),
|
||||
),
|
||||
)
|
||||
append(
|
||||
HttpHeaders.Accept,
|
||||
"text/event-stream",
|
||||
|
Loading…
x
Reference in New Issue
Block a user