fix: harden public api token storage

2026-05-23 17:47:13 +02:00
parent ee663afffb
commit e2b95f183d
6 changed files with 23 additions and 11 deletions
@@ -240,8 +240,7 @@ def require_api_token_scope(required_scope: str) -> Callable:

        token = find_api_token(db, api_key)
        if token is None:
-            suffix = api_key[-8:] if len(api_key) >= 8 else "invalid"
-            logger.warning("Invalid public API token attempt: ...%s", suffix)
+            logger.warning("Invalid public API token attempt")
            raise HTTPException(
                status_code=status.HTTP_401_UNAUTHORIZED,
                detail="Invalid API token",