mirror of
https://github.com/MHSanaei/3x-ui.git
synced 2026-07-11 02:13:11 +00:00
92303094fd
Redacted secrets (SMTP password, Telegram bot token, LDAP password) are always served blank to the browser, so the update path treats a blank submission as "unchanged" and silently restores the stored value. That made a once-set secret impossible to remove without editing the database — e.g. switching to a passwordless localhost SMTP relay kept sending the old credentials forever. Blank stays "unchanged"; clearing is now its own signal. The update request carries explicit clear flags (request-scoped fields on the controller form, so they are never persisted as settings rows), and preserveRedactedSecrets skips the restore for a flagged secret. Each secret field gets a Clear/Undo button that arms the flag; typing a new value disarms it. The 2FA token keeps its existing behavior: it is already clearable by disabling 2FA. Closes #5724 |
||
|---|---|---|
| .. | ||
| api.go | ||
| api_auth_test.go | ||
| api_docs_test.go | ||
| base.go | ||
| client.go | ||
| dist.go | ||
| dist_test.go | ||
| group.go | ||
| host.go | ||
| host_test.go | ||
| inbound.go | ||
| index.go | ||
| login_limiter.go | ||
| login_limiter_test.go | ||
| node.go | ||
| server.go | ||
| setting.go | ||
| spa.go | ||
| spa_test.go | ||
| util.go | ||
| util_test.go | ||
| websocket.go | ||
| xray_setting.go | ||