apunkt/SurfSense
1
0
Fork 0
mirror of https://github.com/MODSetter/SurfSense.git synced 2026-05-05 13:52:40 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

fix: encrypt tokens at rest, invalidate cache on refresh, clean up logging

Browse source
This commit is contained in:
CREDO23 2026-04-22 20:08:19 +02:00
parent 4915675f45
commit a1d03da896
3 changed files with 103 additions and 75 deletions
Download patch file Download diff file Expand all files Collapse all files

10
surfsense_backend/app/routes/mcp_oauth_route.py
View file

@ -79,16 +79,15 @@ async def _fetch_account_metadata(
"https://api.airtable.com/v0/meta/whoami",
headers={"Authorization": f"Bearer {access_token}"},
)
if resp.status_code != 200:
logger.warning(
"Airtable whoami API response: status=%s body=%s",
resp.status_code, resp.text[:300],
)
if resp.status_code == 200:
whoami = resp.json()
meta["user_id"] = whoami.get("id", "")
meta["user_email"] = whoami.get("email", "")
meta["display_name"] = whoami.get("email", "Airtable")
else:
logger.warning(
"Airtable whoami API returned %d (non-blocking)", resp.status_code,
)
except Exception:
logger.warning(
@ -346,7 +345,6 @@ async def mcp_oauth_callback(
"server_config": {
"transport": "streamable-http",
"url": mcp_url,
"headers": {"Authorization": f"Bearer {access_token}"},
},
"mcp_service": svc_key,
"mcp_oauth": {