Un-Share a Private Link

[ElCapitannn]

Shaarli version 0.12.1

How does one un-share a private link?

How does one view all private links which have been shared?

thanks

[nodiscc]

How does one un-share a private link?

Is deleting the link not enough? Or do you mean something else?

How does one view all private links which have been shared?

https://shaarli.readthedocs.io/en/master/Usage/#publicprivate-shaares (you must, of course, be logged in)

[ElCapitannn]

Is deleting the link not enough? Or do you mean something else?

I am referring to the "Share a private link" button underneath a particular shaare. It generates a link with ?key=**************

I believe the shaare remains private, but anyone with this link can see the shaare. My questions are in reference to this functionality.

[nodiscc]

"Share a private link" button underneath a particular shaare. It generates a link with ?key=**************

Do you mean token=******? Like https://demo.shaarli.org/admin/shaare/private/LLgT1A?token=4a07694f7206f20cf02018105f97d7b362c39f86 ?

I believe the shaare remains private, but anyone with this link can see the shaare

I had never used this feature before, but on the demo instance (master) and on my own instance (v0.12.2), going to such a URL while logged out redirects to the login form, so I don't think "anyone with this link can see the shaare". Does it work differently for you?

[ElCapitannn]

Click the "Share a private link" button and, in my case, this takes me to a new URL. Copy what is in the address bar and you should then have a URL ending with ?key=******

When I go to this URL, I am able to see the shaare without being logged in.

[nodiscc]

Ok, now I can reproduce this 👍

This feature was introduced in #1597 in 2020, I don't think there is a way to "unshare" a private shaare, as the private key gets generated/written to the datastore when you first click the /admin/shaare/private/... link.

• this should be made clearer in the docs and/or tooltip.

The only workarounds I can see for now are

• delete/recreate the shaare (this can probably be automated using the API if you have a large number of shared private links).
• edit the datastore manually (risky) to remove the private key

Tagging this as a feature request as I think there should be a way to:

• Clearly show which private shaares are shared (have a private key attached to their datastore entry)
• Maybe list such shaares through the API
• Unshare (clear the private key) a private shaare from the web interface