jigarius
commented
5 years ago Action taken
- Split the controller into 3 to not have one giant controller
- Add an endpoint for reading Toggl workspaces
- Remove all client-side requests to Toggl – all requests are now made from the server-side
Making requests to Toggl from the client side requires the Toggl token to be available at the JavaScript level. To remove this necessity, simply make all requests to Toggl from Ruby and not using AJAX. Only some such requests are left now. This might even eliminate the need for domain whitelisting for CORS.