Skip to content

api: enforce authentication and credential masking for provider configuration - #638

Open
adilalperenciftci wants to merge 1 commit into
ValueCell-ai:mainfrom
adilalperenciftci:fix/provider-auth-credential-redaction
Open

adilalperenciftci wants to merge 1 commit into
ValueCell-ai:mainfrom
adilalperenciftci:fix/provider-auth-credential-redaction

Conversation

@adilalperenciftci

Copy link
Copy Markdown

Summary

Enforce authentication dependency and credential redaction across provider endpoints.

Changes

  1. Introduced authentication dependency in GET and PUT provider configuration routes.
  2. Masked API keys returned in provider details.
  3. Preserved client-side frontend compatibility.
  4. Added comprehensive pytest suite covering authentication and redaction.

Fixes: #636

…dpoints

Require active session authentication on provider configuration endpoints and redact plaintext API credentials from provider responses.

Fixes: ValueCell-ai#636
Signed-off-by: Adil Alperen Çiftci <adilalperenciftci@users.noreply.github.com>
@adilalperenciftci
adilalperenciftci marked this pull request as ready for review October 27, 2026 01:49
Copilot AI balanced review requested due to automatic review settings October 27, 2026 01:49

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota.

An organization owner can choose the repository organization as the billing source for reviews requested by members with a paid Copilot license. Learn about Copilot code review billing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Unauthenticated Provider Credential Disclosure and Configuration Modification in ValueCell

2 participants