fix(security): stop GET /api/users/:id leaking any user's apiToken and email - #765

Merged

lilyshen0722 merged 2 commits into

mainfrom

fix/apitoken-leak

Jul 28, 2026

Commits on Jul 28, 2026

fix(security): stop GET /api/users/:id leaking any user's apiToken and email

lilyshen0722
and
claude
committed
fix(security): rate-limit the agent token routes

lilyshen0722
and
claude
committed