maziggy b71b721658 fix(security): stop leaking webhook tokens via httpx debug logging ...

Settings → Support → Debug Logging elevated httpx/httpcore to DEBUG,
  which makes httpx log every outbound request URL. For Discord and
  generic webhook notifications the bearer token is embedded in the URL
  path, so users who turned on debug logging to capture a support bundle
  were writing their webhook tokens straight into bambuddy.log.

  Pin httpx/httpcore to WARNING regardless of the debug toggle. paho.mqtt
  still honours debug. Users who enabled debug logging while notifications
  were sending must rotate any exposed Discord/webhook URLs — the token
  is the path, so the whole URL has to be regenerated in the provider UI.

2026-04-14 09:13:55 +02:00

..

integration

feat: Two-Factor Authentication (TOTP, Email OTP) and OIDC/SSO – full implementation with admin UI (#933)

2026-04-13 13:24:28 +02:00

unit

fix(security): stop leaking webhook tokens via httpx debug logging

2026-04-14 09:13:55 +02:00

__init__.py

Add comprehensive automated testing infrastructure

2025-12-11 10:03:40 +01:00

conftest.py

feat: Two-Factor Authentication (TOTP, Email OTP) and OIDC/SSO – full implementation with admin UI (#933)

2026-04-13 13:24:28 +02:00

pytest.ini

Add comprehensive automated testing infrastructure

2025-12-11 10:03:40 +01:00