Security : remove access token in request query param

[laurent-treeb]

pantalaimon/pantalaimon/daemon.py

Line 182 in cd36ca6

method, path = Api.whoami(access_token)

The access_token is thrown to server Synapse in query param when a call to Api.whoami is done.
For security reasons => must be thrown in Authorization header instead.

[laurent-treeb]

Replacement code:

                method = "GET"
                path = Api._build_path(path=["account", "whoami"])
                headers = [("Authorization", f"Bearer {access_token}")]

                resp = await session.request(
                    method,
                    self.homeserver_url + path,
                    proxy=self.proxy,
                    ssl=self.ssl,
                    headers=headers,
                )