Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Not authenticating when clicking "Fetch original content" #188

Open
triDcontrols opened this issue Jul 19, 2018 · 3 comments
Open

Not authenticating when clicking "Fetch original content" #188

triDcontrols opened this issue Jul 19, 2018 · 3 comments
Labels

Comments

@triDcontrols
Copy link

Running latest miniflux 2.0.9, I have a authentication subscription feed, which I subscribed successfully, and I can see the feed, but when I load an article, and select "Fetch original content", I can't view the article, because the credentials used for subscribing are not being used to authenticate and fetch the article.

@triDcontrols triDcontrols changed the title No authentication when clicking "Fetch original content" Not authenticating when clicking "Fetch original content" Jul 19, 2018
@dzaikos
Copy link
Contributor

dzaikos commented Jul 19, 2018

One concern I see is that if Miniflux were to assume that a feed that requires authentication means entry links also require authentication, there would have to be some form of domain check before fetching the URL. Some web sites have "linked articles" in which the summary in the feed is a brief commentary but the link actually goes to the original (i.e. different) site being talking about. (Daring Fireball has a lot of linked articles in which Gruber just briefly comments on other's posts.)

If Miniflux just put the credentials in there for every request, it might end up exposing them to third parties.

@triDcontrols
Copy link
Author

Yes, I can see that. if there was a way to stick to same origin perhaps, only supply credentials of the subscribed feed URL.

@triDcontrols
Copy link
Author

Hi, Checking in on this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Development

No branches or pull requests

3 participants