You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

memoclaw 9d3a74bccc fix(api): make credentials write-only and restrict sensitive settings to admins ... Security fixes for credential leakage across three resources: - NOTIFICATION setting: restrict GetInstanceSetting to admin-only (was publicly accessible, exposing SMTP credentials) - SMTP password: never return SmtpPassword in API responses (write-only) - S3 secret: never return AccessKeySecret in API responses (write-only) - OAuth2 ClientSecret: never return in API responses for any role (was previously returned to admins); remove redactIdentityProviderResponse in favor of omitting the field at the conversion layer - Preserve-on-empty: when updating settings with an empty credential field, preserve the existing stored value instead of overwriting (applies to SmtpPassword, AccessKeySecret, and ClientSecret) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>		3 months ago
..
attachment_service_test.go	fix: prevent local attachment uploads from overwriting files	3 months ago
auth_test.go	refactor: user auth improvements (#5360)	6 months ago
idp_service_test.go	fix(api): make credentials write-only and restrict sensitive settings to admins	3 months ago
instance_admin_cache_test.go	feat: update instance profile to use admin user instead of initialized flag	5 months ago
instance_service_test.go	fix(api): make credentials write-only and restrict sensitive settings to admins	3 months ago
memo_attachment_service_test.go	fix(security): implement security review recommendations (#5228)	7 months ago
memo_relation_service_test.go	fix(security): implement security review recommendations (#5228)	7 months ago
memo_service_test.go	fix(api): switch user resource names to usernames (#5779)	3 months ago
memo_share_service_test.go	feat(memo): add share links for private memos (#5742)	3 months ago
reaction_service_test.go	fix(api): switch user resource names to usernames (#5779)	3 months ago
shortcut_service_test.go	fix(api): switch user resource names to usernames (#5779)	3 months ago
sse_handler_test.go	refactor(sse): move status indicator to avatar badge	4 months ago
test_helper.go	perf: batch load memo relations when listing memos (#5692)	3 months ago
user_email_visibility_test.go	fix(api): restrict user email exposure to self and admins (#5784)	3 months ago
user_notification_test.go	fix(api): switch user resource names to usernames (#5779)	3 months ago
user_resource_name_test.go	fix(api): switch user resource names to usernames (#5779)	3 months ago
user_service_registration_test.go	fix(api): switch user resource names to usernames (#5779)	3 months ago
user_service_stats_test.go	fix(api): switch user resource names to usernames (#5779)	3 months ago