api key exposure when opening a pdf

[horstepipe 427]

Hello

from my point this is a no go - sure one could argument that you get the same if you examine client logs, but how this is being done here is way too easy:

if you open a pdf on IOS the app directs to browser with a link to the file with the api key - so the user can share that link to whoever he wants…