cproudlock e4db112296 Use a valuetype the settings column actually documents ...

printedparts_kiosk_token declared valuetype 'secret'. The column documents
string, boolean, integer and json, and that was the only 'secret' in the
codebase - it worked only because Setting.get falls through to the raw string
when it recognises nothing.

Masking never depended on it: settings.py::_is_secret keys on the NAME
containing 'token', so the value is still hidden in API reads and in the audit
log. Changed to string, which is what it is.

Scope: product

2026-09-02 17:49:38 -04:00

8.6 KiB

Raw Blame History

View Raw