From 2d44f8fd1f725fe54c1d54eb344a3e9d301d2f2b Mon Sep 17 00:00:00 2001
From: Aysel Afsar <aysel.afsar@gmail.com>
Date: Thu, 3 May 2018 14:47:59 -0400
Subject: [PATCH] Do not send servers auth credentials to client

---
 Packages/ohif-servers/server/publications.js | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/Packages/ohif-servers/server/publications.js b/Packages/ohif-servers/server/publications.js
index cc1db288c..50cee60ee 100644
--- a/Packages/ohif-servers/server/publications.js
+++ b/Packages/ohif-servers/server/publications.js
@@ -4,7 +4,10 @@ import { Servers, CurrentServer } from 'meteor/ohif:servers/both/collections';
 // When publishing Servers Collection, do not publish the requestOptions.headers
 // field in case any authentication information is being passed
 Meteor.publish('servers', () => Servers.find({}, {
-    fields: { 'requestOptions.headers': 0 }
+    fields: {
+        'requestOptions.headers': 0,
+        'requestOptions.auth': 0,
+    }
 }));
 
 Meteor.publish('currentServer', () => CurrentServer.find());