Unverified50% confidenceSolutionExact time
The author added the environment variable CRON_SECRET, distinguishing external triggers from internal calls by carrying a shared secret in a request header (such as x-cron-secret), and returning 401 if the secret does not match.
1
Sources
50%
Confidence
Long-term
Relevance
10/13/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedUsing the CRON_SECRET shared secret for authentication belongs to the same pattern as Stripe Webhook signatures and the GitHub Webhook Secret.78% similarUnverifiedcroc uses the PAKE (Password-Authenticated Key Exchange) protocol to negotiate encryption keys.66% similarUnverifiedcroc 具体采用的是 SPAKE2（Simple Password Authenticated Key Exchange version 2）63% similarUnverifiedSupabase's public anonymous key (anon key) is by design not a secret, is permitted to appear in frontend code, and only represents the identity of an 'unauthenticated user'.63% similarUnverifiedcroc uses end-to-end encryption to prevent the relay server from decrypting file contents.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1022051API
curl https://kongchang.com/api/v1/knowledge/claims/1022051MCP
get_claim(id=1022051)