matrix-org / matrix-org/matrix-js-sdk
Auth header is not used everywhere if enabled
Open
Easy
Help Wanted
T-Defect
- Dominant language
- TypeScript
- Stars
- 2.2k
- Forks
- 704
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 40
Description
media methods pass the token via query to v1 media API :(
Contributor guide
Research direction
Start by locating the media methods that call the v1 media API and inspect how authentication is passed when the auth-header option is enabled. Compare those calls with other API methods; done means the media methods consistently use the auth header rather than passing the token in the query.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- api, authentication
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100