Hacker News new | ask | show | jobs
by ErikHuisman 4706 days ago
Do you mean the access_token en udid? This is how oauth works. It would be nice though if he did an extra redirect after successful connect.
1 comments

No I mean if you secure your dbinbox via the settings with a password. If you then login to that dbinbox you get the following url:

http://dbinbox.com/xxx?password=myplaintextpassword

Ahh yeah. The idea behind that was that you could just enter the URL with the password and skip a screen.

If you'd like to implement a better password authentication system, I'd be happy to accept your pull request.