openclaw-bot e01b5f58c2 test(routes): assert writeEnabled is NOT exposed in public geo-filter GET ...

The GET /api/config/geo-filter endpoint is unauthenticated. Returning
writeEnabled (derived from APIKey presence + strength) leaks whether
the server has a strong API key configured to anonymous callers.

This is a red commit: both subtests now assert writeEnabled is absent.
Current production handler still emits the field, so they fail.

2026-05-21 02:39:39 +00:00

..

decrypt

feat: CLI tool to decrypt and export hashtag channel messages (#724)

2026-04-12 22:07:41 -07:00

ingestor

refactor(db): finish #1283 — Option 4: ingestor owns neighbor-graph + schema migrations; server is read-only (fixes #1287) (#1289)

2026-05-19 23:53:41 -07:00

migrate

refactor(db): finish #1283 — Option 4: ingestor owns neighbor-graph + schema migrations; server is read-only (fixes #1287) (#1289)

2026-05-19 23:53:41 -07:00

server

test(routes): assert writeEnabled is NOT exposed in public geo-filter GET

2026-05-21 02:39:39 +00:00