From 9bfe48d67f2fbbeb6c9fcdcbd0c85c38be629ef0 Mon Sep 17 00:00:00 2001
From: Pulse Monitor <pulse@pulse-monitor.dev>
Date: Thu, 14 Aug 2025 07:52:36 +0000
Subject: [PATCH] fix: remove confusing duplicate API token section

The API Token Manager section was showing a different token than the one
created by Quick Security Setup, causing confusion.

Changes:
- Hide API Token Manager when using Quick Security Setup
- Quick Security Setup manages API tokens via systemd
- Add clarification that the token shown is for API automation
- Remove duplicate/confusing token management UI

The Quick Security Setup token is the only one that matters when using
that method of authentication setup.
---
 .../src/components/Settings/QuickSecuritySetup.tsx           | 3 +++
 frontend-modern/src/components/Settings/Settings.tsx         | 5 +++--
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/frontend-modern/src/components/Settings/QuickSecuritySetup.tsx b/frontend-modern/src/components/Settings/QuickSecuritySetup.tsx
index 5842a3108..f585c1da4 100644
--- a/frontend-modern/src/components/Settings/QuickSecuritySetup.tsx
+++ b/frontend-modern/src/components/Settings/QuickSecuritySetup.tsx
@@ -379,6 +379,9 @@ Important:
                   {copied() === 'token' ? 'Copied!' : 'Copy'}
                 </button>
               </div>
+              <p class="text-xs text-gray-500 dark:text-gray-400 mt-2">
+                This is your API token for automation. Use with X-API-Token header.
+              </p>
             </div>
           </div>
 
diff --git a/frontend-modern/src/components/Settings/Settings.tsx b/frontend-modern/src/components/Settings/Settings.tsx
index 14e0ab1da..048a9ce8b 100644
--- a/frontend-modern/src/components/Settings/Settings.tsx
+++ b/frontend-modern/src/components/Settings/Settings.tsx
@@ -1513,8 +1513,9 @@ const Settings: Component = () => {
                 <QuickSecuritySetup />
               </Show>
 
-              {/* API Tokens */}
-              <Show when={securityStatus()?.hasAuthentication}>
+              {/* API Tokens - Only show if NOT using Quick Security Setup */}
+              {/* Quick Security Setup manages its own API token via systemd */}
+              <Show when={false}>
                 <div class="bg-white dark:bg-gray-800 rounded-lg border border-gray-200 dark:border-gray-700 p-6">
                   <h3 class="text-lg font-semibold text-gray-800 dark:text-gray-200 mb-4">API Tokens</h3>
                   <p class="text-sm text-gray-600 dark:text-gray-400 mb-4">