diff options
author | Nick Thomas <nick@gitlab.com> | 2016-09-15 21:10:58 +0300 |
---|---|---|
committer | Nick Thomas <nick@gitlab.com> | 2016-09-19 14:27:37 +0300 |
commit | 48d563a3e4250de5afefa54f5c35cd7ca50d542d (patch) | |
tree | 76d27b544f2101a006688745c9129c3ef47191cf | |
parent | 10c072263b2568a64321439860da039a4f572e31 (diff) |
Stop putting private tokens in Gon
-rw-r--r-- | app/assets/javascripts/api.js | 8 | ||||
-rw-r--r-- | lib/gitlab/gon_helper.rb | 1 |
2 files changed, 0 insertions, 9 deletions
diff --git a/app/assets/javascripts/api.js b/app/assets/javascripts/api.js index 6df2ecf57a2..1cd2302111e 100644 --- a/app/assets/javascripts/api.js +++ b/app/assets/javascripts/api.js @@ -16,9 +16,6 @@ .replace(':id', group_id); return $.ajax({ url: url, - data: { - private_token: gon.api_token - }, dataType: "json" }).done(function(group) { return callback(group); @@ -31,7 +28,6 @@ return $.ajax({ url: url, data: { - private_token: gon.api_token, search: query, per_page: 20 }, @@ -46,7 +42,6 @@ return $.ajax({ url: url, data: { - private_token: gon.api_token, search: query, per_page: 20 }, @@ -61,7 +56,6 @@ return $.ajax({ url: url, data: { - private_token: gon.api_token, search: query, order_by: order, per_page: 20 @@ -74,7 +68,6 @@ newLabel: function(project_id, data, callback) { var url = Api.buildUrl(Api.labelsPath) .replace(':id', project_id); - data.private_token = gon.api_token; return $.ajax({ url: url, type: "POST", @@ -93,7 +86,6 @@ return $.ajax({ url: url, data: { - private_token: gon.api_token, search: query, per_page: 20 }, diff --git a/lib/gitlab/gon_helper.rb b/lib/gitlab/gon_helper.rb index c5a11148d33..2c21804fe7a 100644 --- a/lib/gitlab/gon_helper.rb +++ b/lib/gitlab/gon_helper.rb @@ -11,7 +11,6 @@ module Gitlab if current_user gon.current_user_id = current_user.id - gon.api_token = current_user.private_token end end end |