Fetch: say where the bearer token goes (#259)

The token_env comment said the token goes to the first mirror's host; it
goes to every configured mirror's own host (never to a redirect's).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01912WaK6Rmew3wxZuPyX7E8
This commit is contained in:
Claude 2026-10-08 17:55:31 +00:00
parent 4eb9b565e0
commit cab6af8608
No known key found for this signature in database
1 changed files with 2 additions and 2 deletions

View File

@ -79,8 +79,8 @@ pub struct Options {
pub stall_timeout: Duration,
/// Tries per mirror and file (each resumes where the last one stopped).
pub attempts: u32,
/// The environment variable holding a bearer token for the first mirror's host (sent only over https, never to a
/// host a redirect leads to). `None`: nothing is ever sent, so one model's token cannot leak to another's server.
/// The environment variable holding a bearer token, sent to each configured mirror's own host (only over https,
/// never to a host a redirect leads to), so list only mirrors that may see it. `None`: nothing is ever sent, so one model's token cannot leak to another's server.
pub token_env: Option<&'static str>,
}