Skip to content

Require HTTPS when using bearer token authorization - #10842

Open
ashovlin wants to merge 1 commit into
v2from
shovlia/bearer-fix
Open

ashovlin wants to merge 1 commit into
v2from
shovlia/bearer-fix

Conversation

@ashovlin

@ashovlin ashovlin commented Nov 3, 2026

Copy link
Copy Markdown
Member

Issue #, if available: N/A

Description of changes: Fixes a requirement we missed in the internal bearer token specification, we should require HTTPS since the token is transmitted in plaintext via the Authorization header.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@ashovlin
ashovlin requested a review from a team as a code owner November 3, 2026 14:51

@AndrewAsseily AndrewAsseily left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚢

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants