The gitlab-stats-for-scribtable from p0fi

Set private token as header and not as query parameter

Awesome work!

gitlab-stats-for-scribtable/gitlab-stats.js

Lines 231 to 251 in 42b873b

 let resp = await new Request( 

 `${GITLAB_URL}/api/v4/issues?state=opened&scope=assigned_to_me&private_token=${ACCESS_TOKEN}` 

 ).loadJSON(); 

 const assignedIssueCount = resp.length; 

 resp = await new Request(`${GITLAB_URL}/api/v4/todos?private_token=${ACCESS_TOKEN}`).loadJSON(); 

 const todoCount = resp.length; 

 resp = await new Request( 

 `${GITLAB_URL}/api/v4/merge_requests?scope=assigned_to_me&state=opened&private_token=${ACCESS_TOKEN}` 

 ).loadJSON(); 

 const assingedMrCount = resp.length; 

 const formatter = new DateFormatter(); 

 formatter.dateFormat = 'yyyy-MM-dd'; 

 const yesterday = formatter.string(new Date(Date.now() - 864e5)); 

 resp = await new Request( 

 `${GITLAB_URL}/api/v4/users/${USERNAME}/events?after=${yesterday}&private_token=${ACCESS_TOKEN}` 

 ).loadJSON(); 

 const contribCount = resp.length;

Setting the private token as query parameter is discouraged and it should be rather set as a header, which this framework seems to support: https://docs.scriptable.app/request/#headers / https://docs.gitlab.com/ee/api/#personalproject-access-tokens

Don't pass bearer tokens in page URLs: Bearer tokens SHOULD NOT be
passed in page URLs (for example, as query string parameters).
Instead, bearer tokens SHOULD be passed in HTTP message headers or
message bodies for which confidentiality measures are taken.
Browsers, web servers, and other software may not adequately
secure URLs in the browser history, web server logs, and other
data structures. If bearer tokens are passed in page URLs,
attackers might be able to steal them from the history data, logs,
or other unsecured locations.

How to change Icons

Hello @p0fi,

i just checked your code because i want to build something similar for GitHub.

My Question is how did you insert the Images Properly?

I didn't find any good documentation for that. Did you just encode the url to the Icons? I tried do decode these Base64 String and thougt maybe you store the pictures anywhere and get back to them.

Appreciate your Help asap. 👍🏼

p0fi / gitlab-stats-for-scribtable Goto Github PK

gitlab-stats-for-scribtable's People

Stargazers

Watchers

Forkers

gitlab-stats-for-scribtable's Issues

Set private token as header and not as query parameter

Include it in Awesome Scriptable

How to change Icons

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent

Jobs

	let resp = await new Request(
	`${GITLAB_URL}/api/v4/issues?state=opened&scope=assigned_to_me&private_token=${ACCESS_TOKEN}`
	).loadJSON();
	const assignedIssueCount = resp.length;

	resp = await new Request(`${GITLAB_URL}/api/v4/todos?private_token=${ACCESS_TOKEN}`).loadJSON();
	const todoCount = resp.length;

	resp = await new Request(
	`${GITLAB_URL}/api/v4/merge_requests?scope=assigned_to_me&state=opened&private_token=${ACCESS_TOKEN}`
	).loadJSON();
	const assingedMrCount = resp.length;

	const formatter = new DateFormatter();
	formatter.dateFormat = 'yyyy-MM-dd';
	const yesterday = formatter.string(new Date(Date.now() - 864e5));

	resp = await new Request(
	`${GITLAB_URL}/api/v4/users/${USERNAME}/events?after=${yesterday}&private_token=${ACCESS_TOKEN}`
	).loadJSON();
	const contribCount = resp.length;