MHSanaei 4813a2fe00 fix(api-token): hash tokens at rest and show plaintext only once ...

Store API tokens as SHA-256 hashes instead of plaintext and return the token value only in the create response. List no longer exposes the token, and the UI drops the Show/Copy buttons in favor of a one-time reveal modal at creation.

Match hashes the presented bearer token before the constant-time compare, and a migration hashes any pre-existing plaintext rows in place so existing tokens keep authenticating. Docs and translations updated.

2026-06-03 22:57:50 +02:00

..

ar-EG.json

fix(api-token): hash tokens at rest and show plaintext only once

2026-06-03 22:57:50 +02:00

en-US.json

fix(api-token): hash tokens at rest and show plaintext only once

2026-06-03 22:57:50 +02:00

es-ES.json

fix(api-token): hash tokens at rest and show plaintext only once

2026-06-03 22:57:50 +02:00

fa-IR.json

fix(api-token): hash tokens at rest and show plaintext only once

2026-06-03 22:57:50 +02:00

id-ID.json

fix(api-token): hash tokens at rest and show plaintext only once

2026-06-03 22:57:50 +02:00

ja-JP.json

fix(api-token): hash tokens at rest and show plaintext only once

2026-06-03 22:57:50 +02:00

pt-BR.json

fix(api-token): hash tokens at rest and show plaintext only once

2026-06-03 22:57:50 +02:00

ru-RU.json

fix(api-token): hash tokens at rest and show plaintext only once

2026-06-03 22:57:50 +02:00

tr-TR.json

fix(api-token): hash tokens at rest and show plaintext only once

2026-06-03 22:57:50 +02:00

uk-UA.json

fix(api-token): hash tokens at rest and show plaintext only once

2026-06-03 22:57:50 +02:00

vi-VN.json

fix(api-token): hash tokens at rest and show plaintext only once

2026-06-03 22:57:50 +02:00

zh-CN.json

fix(api-token): hash tokens at rest and show plaintext only once

2026-06-03 22:57:50 +02:00

zh-TW.json

fix(api-token): hash tokens at rest and show plaintext only once

2026-06-03 22:57:50 +02:00