Questions on FreshRSS authentication method
Hi,
I tried the newsflash app which seems to use this crate in order to authenticate to a FreshRSS provider. From what I observed, authenticating is done by sending a request of the form:
POST /api/greader.php/accounts/ClientLogin?Email=<username>&Passwd=<password>
Unfortunately, this systematically receives a 401 error from my instance.
On the other hand, FreshRSS suggests in its configuration to proceed to a similar authentication by performing this request instead:
GET /i/?c=auth&a=login&u=<username>&p=<password>
(which is well accepted by my instance, with the unsafe login option turned on)
Also, other clients I have tried perform a more secure authentication by doing something like this:
POST /api/greader.php/accounts/ClientLogin
(with the secrets in the content of the request instead)
Is this a known issue? Sorry if this issue has already been mentioned
Thanks a lot for your work :)