From c0bfa85688e0789566220ddfc520ca3960c55ca6 Mon Sep 17 00:00:00 2001
From: Rene Luria <rene.luria@infomaniak.com>
Date: Mon, 29 Jun 2026 16:43:09 +0200
Subject: [PATCH] fix: No static key fallback; reject non-OIDC tokens

---
 myice/webapi.py | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/myice/webapi.py b/myice/webapi.py
index 6b44a64..cf2077c 100644
--- a/myice/webapi.py
+++ b/myice/webapi.py
@@ -73,9 +73,7 @@ class AuthHeaders(BaseModel):
         # First check if it's a valid OIDC token
         if self.validate_oidc_token():
             return True
-        # Fallback to the old static key for compatibility
-        if token == "abc":
-            return True
+        # No static key fallback; reject non-OIDC tokens
         return False
 
     def validate_oidc_token(self) -> bool: