From: Raphael Michel <michel@rami.io>
Date: Tue, 24 Mar 2026 08:32:41 +0000 (+0100)
Subject: Add recommendation on HMAC
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=54e7d1f03981cb09a9e4642f7203ba94cb268907;p=thirdparty%2Fpython-fints.git

Add recommendation on HMAC
---

diff --git a/docs/client.rst b/docs/client.rst
index 75d5d91..588229e 100644
--- a/docs/client.rst
+++ b/docs/client.rst
@@ -37,6 +37,12 @@ user or context.
 You SHOULD NOT call any other methods on the :class:`~fints.client.FinTS3Client` object
 after calling :func:`~fints.client.FinTS3Client.deconstruct`.
 
+.. warning::
+
+   The data bassed to :func:`~fints.client.FinTS3Client.set_data` **MUST NOT** be from an untrusted source.
+   Even if stored in a trusted location, we recommend using a HMAC or a similar mechanism to prevent unexpected
+   tampering.
+
 
 Keeping the dialog open
 -----------------------