3x-ui/web/translation
MHSanaei 4813a2fe00
fix(api-token): hash tokens at rest and show plaintext only once
Store API tokens as SHA-256 hashes instead of plaintext and return the token value only in the create response. List no longer exposes the token, and the UI drops the Show/Copy buttons in favor of a one-time reveal modal at creation.

Match hashes the presented bearer token before the constant-time compare, and a migration hashes any pre-existing plaintext rows in place so existing tokens keep authenticating. Docs and translations updated.
2026-06-03 22:57:50 +02:00
..
ar-EG.json fix(api-token): hash tokens at rest and show plaintext only once 2026-06-03 22:57:50 +02:00
en-US.json fix(api-token): hash tokens at rest and show plaintext only once 2026-06-03 22:57:50 +02:00
es-ES.json fix(api-token): hash tokens at rest and show plaintext only once 2026-06-03 22:57:50 +02:00
fa-IR.json fix(api-token): hash tokens at rest and show plaintext only once 2026-06-03 22:57:50 +02:00
id-ID.json fix(api-token): hash tokens at rest and show plaintext only once 2026-06-03 22:57:50 +02:00
ja-JP.json fix(api-token): hash tokens at rest and show plaintext only once 2026-06-03 22:57:50 +02:00
pt-BR.json fix(api-token): hash tokens at rest and show plaintext only once 2026-06-03 22:57:50 +02:00
ru-RU.json fix(api-token): hash tokens at rest and show plaintext only once 2026-06-03 22:57:50 +02:00
tr-TR.json fix(api-token): hash tokens at rest and show plaintext only once 2026-06-03 22:57:50 +02:00
uk-UA.json fix(api-token): hash tokens at rest and show plaintext only once 2026-06-03 22:57:50 +02:00
vi-VN.json fix(api-token): hash tokens at rest and show plaintext only once 2026-06-03 22:57:50 +02:00
zh-CN.json fix(api-token): hash tokens at rest and show plaintext only once 2026-06-03 22:57:50 +02:00
zh-TW.json fix(api-token): hash tokens at rest and show plaintext only once 2026-06-03 22:57:50 +02:00