Do not send servers auth credentials to client

zengbo · May 3, 2018 · 2d44f8f · 2d44f8f
1 parent b6092ca
commit 2d44f8f
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/Packages/ohif-servers/server/publications.js b/Packages/ohif-servers/server/publications.js
@@ -4,7 +4,10 @@ import { Servers, CurrentServer } from 'meteor/ohif:servers/both/collections';
 // When publishing Servers Collection, do not publish the requestOptions.headers
 // field in case any authentication information is being passed
 Meteor.publish('servers', () => Servers.find({}, {
-    fields: { 'requestOptions.headers': 0 }
+    fields: {
+        'requestOptions.headers': 0,
+        'requestOptions.auth': 0,
+    }
 }));
 
 Meteor.publish('currentServer', () => CurrentServer.find());