Only add bearer token header for API calls

infrabel / themes-gnap

Standardized build to produce web themes for use with GNaP.

http://gnap.io/

BSD 3-Clause "New" or "Revised" License

3 stars 4 forks source link

Open sroosen opened 9 years ago

sroosen commented 9 years ago

Currently the bearer token header is added to all XHR requests. We must limit this to API calls (preferably over HTTPS).