From e7ed16284ace4e22b10316e63e9aed23b37aa6d2 Mon Sep 17 00:00:00 2001
From: chris48s <chris48s@users.noreply.github.com>
Date: Wed, 30 Dec 2020 19:59:39 +0000
Subject: [PATCH] set 'Cache-Control: private' on token auth endpoint (#5998)

---
 services/github/auth/admin.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/services/github/auth/admin.js b/services/github/auth/admin.js
index c5ad0bed3e..d5323758d3 100644
--- a/services/github/auth/admin.js
+++ b/services/github/auth/admin.js
@@ -24,6 +24,7 @@ function setRoutes({ shieldsSecret }, { apiProvider, server }) {
         end('Invalid secret.')
       }, 10000)
     }
+    ask.res.setHeader('Cache-Control', 'private')
     end(apiProvider.serializeDebugInfo({ sanitize: false }))
   })
 }