4 ms·
So if I clone this repo I can now access your API account? Might want to pull this repository from Github......
by kfrzcode 10y ago
So if I clone this repo I can now access your API account? Might want to pull this repository from Github......
- divbit 10y agoI guess it might be better to disable the api key...
- jaebradley 10y agoYou would have access to my server token, certainly. But I checked the documentation and in order to request rides, I think you would need other pieces of information that I did not expose. Additionally, there are various scopes that Uber grants regarding the API exposure that any application has. I think / hope that the worst damage that can be done is hitting Uber's rate limit. Definitely not defending my decision to include the server token, but I don't think it's the end of the world (just terrible practice).
- amenghra 10y agountil they launch a new API endpoint and forget to enforce something...