Remove adminSecret from client, move to server-side only

2026-06-18 16:25:59 -07:00
parent ca45f26746
commit b3bb2f13b7
2 changed files with 2 additions and 3 deletions
@@ -1676,7 +1676,7 @@ async function initUser(user) {

 async function notifyAdminOfNewUser(email, uid) {
  try {
-    await fetch(`${window.STEPMATES_CONFIG.adminNotifyUrl}?uid=${uid}&email=${encodeURIComponent(email)}&secret=${window.STEPMATES_CONFIG.adminSecret}`);
+    await fetch(`${window.STEPMATES_CONFIG.adminNotifyUrl}?uid=${uid}&email=${encodeURIComponent(email)}`);
  } catch(e) {
    console.warn('Admin notify failed', e);
  }