If a user updates an endpoint and clears out the basic authentication or secret token secrets, those secrets are correctly deleted from Sources, but its references are not updated in the endpoint.

The problem arises when any other operation is attempted on that endpoint: the back end tries to fetch those notifications but since they don't exist, Sources responds with a 404 and the whole process fails.