From bdefc02e77a8319da6d5e44ac9974bdcaa57c293 Mon Sep 17 00:00:00 2001 From: Yash Kumar Date: Mon, 21 Sep 2026 00:30:38 +0530 Subject: [PATCH] fix: redact apiKey from getAll AI endpoint to prevent credential exposure --- apps/dokploy/server/api/routers/ai.ts | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/apps/dokploy/server/api/routers/ai.ts b/apps/dokploy/server/api/routers/ai.ts index 716f09013..956475590 100644 --- a/apps/dokploy/server/api/routers/ai.ts +++ b/apps/dokploy/server/api/routers/ai.ts @@ -195,9 +195,10 @@ export const aiRouter = createTRPCRouter({ getAll: withAnyPermission("ai", ["read", "create", "update", "delete"]).query( async ({ ctx }) => { - return await getAiSettingsByOrganizationId( + const settings = await getAiSettingsByOrganizationId( ctx.session.activeOrganizationId, ); + return settings.map(({ apiKey, ...rest }) => rest); }, ),