Skip to content

fix(security): redact channel credentials from responses - #831

Merged
yaojin3616 merged 1 commit into
mainfrom
agent/debugger/bc0c5e8e
Aug 7, 2026
Merged

fix(security): redact channel credentials from responses#831
yaojin3616 merged 1 commit into
mainfrom
agent/debugger/bc0c5e8e

Conversation

@yaojin3616

@yaojin3616 yaojin3616 commented Aug 5, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • remove persisted channel credential fields from API response schema
  • redact credential-like values in extensible channel config
  • avoid channel config reads for users without management access

Verification

  • uv run --with pytest pytest tests/test_channel_config_schema.py -q
  • uv run --with ruff ruff check app/schemas/schemas.py tests/test_channel_config_schema.py
  • npm run build

@yaojin3616
yaojin3616 merged commit bd81951 into main Aug 7, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant