fix: redact secret diagnostics

2026-05-22 22:00:28 +02:00
parent 4d1ed329ec
commit eeff24fa5c
10 changed files with 125 additions and 15 deletions
@@ -193,7 +193,7 @@ async def require_admin_auth(

    # 2. Static admin API key
    if api_key and verify_api_key(api_key):
-        return {"auth_type": "api_key", "api_key": api_key}
+        return {"auth_type": "api_key"}

    # 3. Bearer JWT (app-issued; also covers Bearer tokens set by older clients)
    if bearer: