From cab6af8608257ac555d89c127ab362a89fe5f090 Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 8 Oct 2026 17:55:31 +0000 Subject: [PATCH] Fetch: say where the bearer token goes (#259) The token_env comment said the token goes to the first mirror's host; it goes to every configured mirror's own host (never to a redirect's). Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01912WaK6Rmew3wxZuPyX7E8 --- crates/fetch/src/lib.rs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/crates/fetch/src/lib.rs b/crates/fetch/src/lib.rs index 24172529..c5c96a90 100644 --- a/crates/fetch/src/lib.rs +++ b/crates/fetch/src/lib.rs @@ -79,8 +79,8 @@ pub struct Options { pub stall_timeout: Duration, /// Tries per mirror and file (each resumes where the last one stopped). pub attempts: u32, - /// The environment variable holding a bearer token for the first mirror's host (sent only over https, never to a - /// host a redirect leads to). `None`: nothing is ever sent, so one model's token cannot leak to another's server. + /// The environment variable holding a bearer token, sent to each configured mirror's own host (only over https, + /// never to a host a redirect leads to), so list only mirrors that may see it. `None`: nothing is ever sent, so one model's token cannot leak to another's server. pub token_env: Option<&'static str>, }