Skip to content

Authorization as header instead of query parameter #51

@matthiasemde

Description

@matthiasemde

Hi,

I want to set up Immich Frame + Frameo devices with a public endpoint (I want to gift picture frames to family + friends and have them connect to Immich Frame on my home server).
I was wondering if there is a reason why the authSecret is placed into the query parameters instead of an 'Authorization' header. As I understand it, this means that the secret could get exposed whereas in the header it would be encrypted under https.

If you think that this is possible, I'd be willing to try and contribute the feature to the app :)

Best wishes
Matthias

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions