From 01ad6caece378fb232d7b92c8e4036708aba6117 Mon Sep 17 00:00:00 2001
From: Till Prochaska <1512805+tillprochaska@users.noreply.github.com>
Date: Mon, 5 Aug 2024 10:21:20 +0200
Subject: [PATCH] Remove prefilled API key from OpenRefine endpoints

Required as we do not store plaintext API keys anymore. Also, we want to remove the option to pass API keys via URL parameters in the future.

This makes it impossible to use OpenRefine with non-public collections. This was never documented, and most users weren't aware that they can indeed use OpenRefine with non-public collections anyway.
---
 aleph/views/reconcile_api.py | 2 --
 1 file changed, 2 deletions(-)

diff --git a/aleph/views/reconcile_api.py b/aleph/views/reconcile_api.py
index 0cacdcffec..14fd23be1e 100644
--- a/aleph/views/reconcile_api.py
+++ b/aleph/views/reconcile_api.py
@@ -57,8 +57,6 @@ def reconcile_index(collection=None):
     domain = SETTINGS.APP_UI_URL.strip("/")
     label = SETTINGS.APP_TITLE
     suggest_query = []
-    if request.authz.id:
-        suggest_query.append(("api_key", request.authz.role.api_key))
     schemata = list(model)
     if collection is not None:
         label = "%s (%s)" % (collection.get("label"), label)