3x-ui/util
MHSanaei 4813a2fe00
fix(api-token): hash tokens at rest and show plaintext only once
Store API tokens as SHA-256 hashes instead of plaintext and return the token value only in the create response. List no longer exposes the token, and the UI drops the Show/Copy buttons in favor of a one-time reveal modal at creation.

Match hashes the presented bearer token before the constant-time compare, and a migration hashes any pre-existing plaintext rows in place so existing tokens keep authenticating. Docs and translations updated.
2026-06-03 22:57:50 +02:00
..
common Feat/multi inbound clients (#4469) 2026-05-19 12:20:24 +02:00
crypto fix(api-token): hash tokens at rest and show plaintext only once 2026-06-03 22:57:50 +02:00
json_util Feat/multi inbound clients (#4469) 2026-05-19 12:20:24 +02:00
ldap Feat/multi inbound clients (#4469) 2026-05-19 12:20:24 +02:00
netproxy feat(settings): panel network proxy for the panel's own outbound requests 2026-05-28 00:45:32 +02:00
netsafe Feat/multi inbound clients (#4469) 2026-05-19 12:20:24 +02:00
random fix(clients): backfill missing subId on startup and guard create/update 2026-05-28 18:20:34 +02:00
reflect_util Refactor code and fix linter warnings (#3627) 2026-01-05 05:54:56 +01:00
sys Feat/multi inbound clients (#4469) 2026-05-19 12:20:24 +02:00