Jeroen UbbinkandClaude Opus 4.8 afcb3f7cda fix(settings): keep upstream_api_key in the settings blob ...

upstream_api_key was added to SECRET_FIELDS, so it was stripped from every
blob write — but unlike nsec, nothing migrates it into encrypted storage. A
node carrying it only in the DB blob would load it into memory once, rewrite
the blob without it, and lose it on the next restart, breaking upstream auth.

It is node-scoped config that really belongs on a provider, not a vault
secret, and it has no encrypted home yet. Remove it from SECRET_FIELDS so it
stays in the blob exactly as before; redaction on read and ignore-on-write in
the admin settings endpoint are unchanged. Encrypting it is follow-up work.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-23 10:51:20 +02:00

..

core

fix(settings): keep upstream_api_key in the settings blob

2026-07-23 10:51:20 +02:00

nostr

display commit if node not aligned with release tag

2026-05-01 16:47:34 +02:00

payment

refactor: require explicit settlement identity at the billing seams

2026-07-22 15:13:40 +02:00

upstream

Merge pull request #629 from jeroenubbink/fix/bill-served-candidate

2026-07-22 23:23:07 +02:00

__init__.py

chore: update version/readme; minor auth logging and settings usage

2025-09-08 10:53:41 +01:00

algorithm.py

fix: fail over with each candidate provider's own model

2026-07-22 15:12:21 +02:00

auth.py

refactor: require explicit settlement identity at the billing seams

2026-07-22 15:13:40 +02:00

balance.py

fix: retry critical Cashu storage writes

2026-07-18 14:28:18 +02:00

lightning.py

fix: persist and propagate key constraints from Lightning invoices

2026-06-03 14:58:40 +02:00

proxy.py

refactor: drop the dead model-instance alias map

2026-07-22 15:12:21 +02:00

wallet.py

Merge pull request #621 from Routstr/fix/propagate-cashu-storage-errors

2026-07-22 21:18:10 +02:00