yungle246 a79bc7d074 feat(api): mask secret tokens in api-key list responses (reveal-once) ... Previously the console api-key list returned every key's full plaintext token, so anyone with console access could retrieve the secret of an already-created key (via the copy button or the raw API response). This is contrary to the reveal-once norm. - List endpoints (app keys, workspace dataset keys, per-dataset keys) now return a masked token (prefix + last 4); the full secret is only ever returned by the create endpoint, at creation time. - Frontend secret-key modal displays the masked token as-is and drops the copy affordance for existing keys (copying a masked value is pointless). Applies to both app and dataset keys since they share the modal and the ApiKeyItem response model.		2026-06-25 14:21:38 +09:00
..
common	feat: guard openapi with rbac (#37752)	2026-06-22 09:35:33 +00:00
console	feat(api): mask secret tokens in api-key list responses (reveal-once)	2026-06-25 14:21:38 +09:00
files	chore: add more type in test (#37609)	2026-06-18 23:07:12 +00:00
inner_api	feat(agent-v2): sync nightly updates to main (2026-06-22) (#37651)	2026-06-23 08:05:16 +00:00
openapi	fix(app): derive get-app --mode whitelist from listable app types (#37761)	2026-06-23 04:40:05 +00:00
service_api	Merge branch 'main' into feat/dataset-api-key-scope	2026-06-23 18:21:21 +09:00
trigger	fix: clarify webhook debug endpoint behavior (#33597)	2026-03-18 14:28:33 +08:00
web	fix: validate conversation variable description length to prevent varchar(255) truncation error (#33038)	2026-06-10 07:28:12 +00:00
__init__.py	feat: return data_source_info and data_source_detail_dict (#29912)	2026-01-05 11:04:03 +08:00
test_compare_versions.py	refactor(version): simplify version comparison logic (#10109)	2024-10-31 15:15:32 +08:00
test_conversation_rename_payload.py	fix: conversation rename payload validation (#29510)	2025-12-11 18:05:41 +09:00
test_swagger.py	docs: enrich generated service API descriptions (#37615)	2026-06-18 08:43:39 +00:00