secret-strip slack-dm-viewer: env-first the hardcoded George basic-auth cred (server ×8) + drop browser-embedded copy (client)

03020f53fdd4bfe131257e8244d450b697c33945 · 2026-06-12 13:01:51 -0700 · Steve Abrams
Files touched

M claude-steve.html
M server.js
Diff

commit 03020f53fdd4bfe131257e8244d450b697c33945
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Fri Jun 12 13:01:51 2026 -0700

    secret-strip slack-dm-viewer: env-first the hardcoded George basic-auth cred (server ×8) + drop browser-embedded copy (client)
---
 claude-steve.html |  2 +-
 server.js         | 16 ++++++++--------
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/claude-steve.html b/claude-steve.html
index 0b386de..840a45f 100644
--- a/claude-steve.html
+++ b/claude-steve.html
@@ -149,7 +149,7 @@
   <script src="https://unpkg.com/dompurify@3.0.6/dist/purify.min.js" crossorigin></script>
   <script type="text/babel">
     const { useState, useEffect, useMemo, useCallback } = React;
-    const AUTH = 'Basic ' + btoa('admin:I3YusisdESUNdxtrmlb3QJeu9q8ODKJO');
+    const AUTH = '';
 
     function fmtTime(ts) {
       if (!ts) return '';
diff --git a/server.js b/server.js
index e76cc17..c17eb3c 100644
--- a/server.js
+++ b/server.js
@@ -11,7 +11,7 @@ const PORT = process.env.PORT || 7204;
 
 // --- Auth ---
 const AUTH_USER = 'admin';
-const AUTH_PASS = 'I3YusisdESUNdxtrmlb3QJeu9q8ODKJO';
+const AUTH_PASS = process.env.GEORGE_BASIC_AUTH_PASS || '';
 
 function basicAuth(req, res, next) {
   // Skip auth for health endpoint
@@ -804,7 +804,7 @@ function getHTML() {
 
       // Load config on mount
       useEffect(() => {
-        fetch('/api/config', { headers: { 'Authorization': 'Basic ' + btoa('admin:I3YusisdESUNdxtrmlb3QJeu9q8ODKJO') } })
+        fetch('/api/config', { headers: { 'Authorization': 'Basic ' + btoa('admin:' + '') } })
           .then(r => r.json())
           .then(cfg => {
             if (cfg.channelId) {
@@ -823,7 +823,7 @@ function getHTML() {
         try {
           const params = chId ? '?channel=' + chId : '';
           const res = await fetch('/api/messages' + params, {
-            headers: { 'Authorization': 'Basic ' + btoa('admin:I3YusisdESUNdxtrmlb3QJeu9q8ODKJO') }
+            headers: { 'Authorization': 'Basic ' + btoa('admin:' + '') }
           });
           const data = await res.json();
           if (data.ok) {
@@ -834,7 +834,7 @@ function getHTML() {
           } else {
             // Try cached
             const cachedRes = await fetch('/api/cached', {
-              headers: { 'Authorization': 'Basic ' + btoa('admin:I3YusisdESUNdxtrmlb3QJeu9q8ODKJO') }
+              headers: { 'Authorization': 'Basic ' + btoa('admin:' + '') }
             });
             const cachedData = await cachedRes.json();
             if (cachedData.messages && cachedData.messages.length > 0) {
@@ -859,7 +859,7 @@ function getHTML() {
           const res = await fetch('/api/config/channel', {
             method: 'POST',
             headers: {
-              'Authorization': 'Basic ' + btoa('admin:I3YusisdESUNdxtrmlb3QJeu9q8ODKJO'),
+              'Authorization': 'Basic ' + btoa('admin:' + ''),
               'Content-Type': 'application/json'
             },
             body: JSON.stringify({ channelId: channelInput.trim() })
@@ -880,7 +880,7 @@ function getHTML() {
         try {
           const res = await fetch('/api/detect-channel', {
             method: 'POST',
-            headers: { 'Authorization': 'Basic ' + btoa('admin:I3YusisdESUNdxtrmlb3QJeu9q8ODKJO') }
+            headers: { 'Authorization': 'Basic ' + btoa('admin:' + '') }
           });
           const data = await res.json();
           if (data.ok) {
@@ -917,7 +917,7 @@ function getHTML() {
           const res = await fetch('/api/upload', {
             method: 'POST',
             headers: {
-              'Authorization': 'Basic ' + btoa('admin:I3YusisdESUNdxtrmlb3QJeu9q8ODKJO'),
+              'Authorization': 'Basic ' + btoa('admin:' + ''),
               'Content-Type': 'application/json'
             },
             body: JSON.stringify({ messages: parsed })
@@ -927,7 +927,7 @@ function getHTML() {
             showToast('Uploaded ' + data.count + ' messages', 'success');
             // Reload from cache
             const cachedRes = await fetch('/api/cached', {
-              headers: { 'Authorization': 'Basic ' + btoa('admin:I3YusisdESUNdxtrmlb3QJeu9q8ODKJO') }
+              headers: { 'Authorization': 'Basic ' + btoa('admin:' + '') }
             });
             const cachedData = await cachedRes.json();
             setMessages(cachedData.messages || []);
← 26fc113 add noreferrer to all target=_blank links · back to Slack Dm Viewer · (newest)