From 3ae64822e14ff8dd74739b013d3b3041e8ac6856 Mon Sep 17 00:00:00 2001 From: Muhsin Keloth Date: Mon, 27 Nov 2023 13:24:53 +0530 Subject: [PATCH] chore: Enforce HTTP Basic Authentication for Twilio medias. (#8396) --- app/services/twilio/incoming_message_service.rb | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/app/services/twilio/incoming_message_service.rb b/app/services/twilio/incoming_message_service.rb index 2e77e79d0..abb6eb9f9 100644 --- a/app/services/twilio/incoming_message_service.rb +++ b/app/services/twilio/incoming_message_service.rb @@ -108,7 +108,9 @@ class Twilio::IncomingMessageService return if params[:MediaUrl0].blank? attachment_file = Down.download( - params[:MediaUrl0] + params[:MediaUrl0], + # https://support.twilio.com/hc/en-us/articles/223183748-Protect-Media-Access-with-HTTP-Basic-Authentication-for-Programmable-Messaging + http_basic_authentication: [twilio_channel.account_sid, twilio_channel.auth_token || twilio_channel.api_key_sid] ) attachment = @message.attachments.new(