tliu93 c2b1b7b751 M2-T01: add config JSON API (GET/PUT /api/config) ...

- new app/api/routes/api/ package with shared require_session (401) and
  require_csrf (presence-only X-CSRF-Token, 403) dependencies
- GET /api/config returns masked config sections; PUT /api/config reuses
  save_config_updates (blank secret keeps old; invalid -> 422, no write)
- session-protected; PUT also CSRF-protected
- register router in app/main.py; regenerate openapi/
- tests/test_api_config.py

2026-06-12 23:08:14 +02:00

18 KiB

Raw Blame History