TODO: rework because security reasons