rays 80f12cda70 A feed's credentials go to its own host alone (#327 #328) ...

feed::fetch already sent basic auth only to the feed's own host, but
two paths around it did not:

- download::download attached the feed's username and password to
  every enclosure, on whatever host the feed named: a CDN, or the
  measurement and ad-insertion prefixes podcasts route through (#328).
- subscriptions() and promote_kept() gave every feed an OPML or Patreon
  list derives the list's credentials, and fetch's same-host check then
  compared against the derived feed's own URL, so the list's password
  went to every host the OPML named, on every scan (#327).

config::Feed::auth_for and credentials_for compare hosts once, and
each of the three uses them.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-23 14:02:10 +00:00

..

architecture.md

docs/signals.md: how Signals work, with TypeSafe's requests and answers and the API

2026-10-16 17:57:05 +00:00

cli.md

The first admin gets a random password, not admin / ipodderx (#321)

2026-10-23 13:55:34 +00:00

configuration.md

A feed's credentials go to its own host alone (#327 #328)

2026-10-23 14:02:10 +00:00

directory.md

Apple Podcasts' top charts into the directory weekly, and its categories checked (#252)

2026-10-16 13:21:48 +00:00

signals.md

An OPML's page lists its shows' items together, not the shows (#283)

2026-10-18 17:41:38 +00:00

sso.md

docs: the three services, their versions and traces (#207, #213)

2026-10-12 16:40:08 +00:00

users.md

The first admin gets a random password, not admin / ipodderx (#321)

2026-10-23 13:55:34 +00:00