From 5f94f9bcec09522fa17b27652ab5f9373e092265 Mon Sep 17 00:00:00 2001
From: Till Prochaska <1512805+tillprochaska@users.noreply.github.com>
Date: Mon, 5 Aug 2024 11:39:16 +0200
Subject: [PATCH] Remove prefilled API key from OpenRefine endpoints

Required as we do not store plaintext API keys anymore. Also, we want to remove the option to pass API keys via URL parameters in the future.

This makes it impossible to use OpenRefine with non-public collections. This was never documented, and most users weren't aware that they can indeed use OpenRefine with non-public collections anyway.
---
 aleph/views/reconcile_api.py | 2 --
 1 file changed, 2 deletions(-)

diff --git a/aleph/views/reconcile_api.py b/aleph/views/reconcile_api.py
index 0cacdcffec..14fd23be1e 100644
--- a/aleph/views/reconcile_api.py
+++ b/aleph/views/reconcile_api.py
@@ -57,8 +57,6 @@ def reconcile_index(collection=None):
     domain = SETTINGS.APP_UI_URL.strip("/")
     label = SETTINGS.APP_TITLE
     suggest_query = []
-    if request.authz.id:
-        suggest_query.append(("api_key", request.authz.role.api_key))
     schemata = list(model)
     if collection is not None:
         label = "%s (%s)" % (collection.get("label"), label)