From d94628ce86db41757212cd41c1571f1437316058 Mon Sep 17 00:00:00 2001
From: eddy <eddy@macmini.local>
Date: Wed, 5 Aug 2026 21:20:34 +0200
Subject: [PATCH] fix: remove hardcoded API token from SettingsScreen

- Replace hardcoded Bearer token default with empty string
- Remove auto-save in useEffect that wrote defaults to SecureStore
  without user consent on first app launch

Fixes #2
---
 src/screens/SettingsScreen.tsx | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/src/screens/SettingsScreen.tsx b/src/screens/SettingsScreen.tsx
index 4fd283d..a3ca7a4 100644
--- a/src/screens/SettingsScreen.tsx
+++ b/src/screens/SettingsScreen.tsx
@@ -28,7 +28,7 @@ export async function getApiConfig(): Promise<ApiConfig | null> {
 
 export default function SettingsScreen() {
   const [url, setUrl] = useState('https://weegschaal.eddydevink.nl')
-  const [token, setToken] = useState('REDACTED')
+  const [token, setToken] = useState('')
   const [showToken, setShowToken] = useState(false)
   const [syncing, setSyncing] = useState(false)
 
@@ -37,8 +37,6 @@ export default function SettingsScreen() {
       if (c) {
         setUrl(c.url)
         setToken(c.token)
-      } else {
-        saveConfig({ url, token })
       }
     })
   }, [])