Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Authenticate against the beeminder api using HTTP Header #447

Merged
merged 1 commit into from
Feb 23, 2024

Conversation

theospears
Copy link
Collaborator

The beeminder api now supports authenticating using the Authorization header, as an alternate to passing an access token as a parameter. Switch to using this form, as it keeps authentication information out of the URL, which means it is less likely to e.g. be leaked as part of logs, either on the client or server.

Testing:

  • Verified read and write operations on the app worked
  • Used debugger to check registering device token works
  • Checked signing out and signing in still works

@theospears
Copy link
Collaborator Author

This stack of pull requests is managed by Graphite. Learn more about stacking.

Join @theospears and the rest of your teammates on Graphite Graphite

@theospears theospears merged commit 80c1168 into master Feb 23, 2024
2 checks passed
@theospears theospears deleted the authorize-via-header branch February 23, 2024 01:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant