Skip to content

fix(api-client): send the API key in a header for image downloads - #989

Open
ugcodrr wants to merge 3 commits into
fix/image-download-timeoutfrom
fix/image-api-key-header
Open

ugcodrr wants to merge 3 commits into
fix/image-download-timeoutfrom
fix/image-api-key-header

Conversation

@ugcodrr

@ugcodrr ugcodrr commented Oct 19, 2026 •

Copy link
Copy Markdown
Member

Description: Skin, head and badge downloads were the only bot requests that put the API key in the URL, where it can end up in proxy logs and error reports.

Testing: point getPlayerHead at nc -l 4012. The key arrives in an x-api-key header, not the URL.

Depends on #982

@vercel

vercel Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
statsify Ignored Ignored Preview Nov 3, 2026 1:50am UTC

@ugcodrr
ugcodrr force-pushed the fix/image-api-key-header branch from 8dde7f3 to ed27364 Compare November 2, 2026 00:30
@vercel

vercel Bot commented Nov 2, 2026

Copy link
Copy Markdown

Deployment failed for project statsify with the following error:

Resource is limited - try again in 24 hours (more than 100, code: "api-deployments-free-per-day").

Learn More: https://vercel.com/statsify-net?upgradeToPro=build-rate-limit

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant