Do not send servers auth credentials to client

This commit is contained in:
Aysel Afsar 2018-05-03 14:47:59 -04:00
parent b6092ca759
commit 2d44f8fd1f

View File

@ -4,7 +4,10 @@ import { Servers, CurrentServer } from 'meteor/ohif:servers/both/collections';
// When publishing Servers Collection, do not publish the requestOptions.headers
// field in case any authentication information is being passed
Meteor.publish('servers', () => Servers.find({}, {
fields: { 'requestOptions.headers': 0 }
fields: {
'requestOptions.headers': 0,
'requestOptions.auth': 0,
}
}));
Meteor.publish('currentServer', () => CurrentServer.find());