Stefan AgnerandClaude Fable 5.1 64ea3be432 Keep "!secret" references when persisting app options (#7237) ...

Since #6203 the set-options endpoint stores the value returned by the
options validator. The validator replaces "!secret x" with the resolved
secret before type-checking, so the plaintext secret ended up in the
persisted app options instead of the reference (#7152).

Make the validator non-destructive on request instead of restoring the
references afterwards: AppOptions gains a resolve_secrets flag. When it
is False, a "!secret x" value is still validated against the resolved
secret (including the pwned hash and type coercion) but the reference is
returned. The set-options endpoint validates with resolve_secrets=False,
while write_options and the self options config endpoint keep resolving
secrets for the container.

Fixes #7152

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>

2026-09-17 15:27:39 +02:00

..

middleware

Forward Core API proxy paths byte-for-byte and match deny rules on decoded path (#7225)

2026-09-15 13:11:08 +02:00

__init__.py

Strip ANSI escape color sequences from /latest log responses (#6319)

2025-11-19 09:39:24 +01:00

conftest.py

Replace addon with app in docker container names for apps (#6997)

2026-07-03 15:44:22 +02:00

test_apps.py

Keep "!secret" references when persisting app options (#7237)

2026-09-17 15:27:39 +02:00

test_audio.py

Add one-shot mode and docker-given totals to stats API (#7168)

2026-08-31 17:11:38 +02:00

test_auth.py

Rename addon/addons to app/apps in filenames and imports (#6837)

2026-05-13 20:55:46 +02:00

test_backups.py

Start the Supervisor auto update on every version reload (#7201)

2026-09-14 15:56:21 +02:00

test_cli.py

Add one-shot mode and docker-given totals to stats API (#7168)

2026-08-31 17:11:38 +02:00

test_discovery.py

Forward Core API proxy paths byte-for-byte and match deny rules on decoded path (#7225)

2026-09-15 13:11:08 +02:00

test_dns.py

Add one-shot mode and docker-given totals to stats API (#7168)

2026-08-31 17:11:38 +02:00

test_docker.py

Add endpoint to reset Docker storage (#7166)

2026-08-27 12:53:16 +02:00

test_hardware.py

Drop redundant @pytest.mark.asyncio decorators (#6795)

2026-05-04 14:48:18 +02:00

test_homeassistant.py

Block start/restart/rebuild/update APIs while Supervisor is not fully running (#7194)

2026-09-15 14:45:26 +02:00

test_host.py

Hide new ntp host feature from v1 /host/info features field (#7207)

2026-09-10 11:20:35 +02:00

test_ingress.py

Enable flake8-pyi, flake8-return, flake8-raise ruff rules (#6861)

2026-05-22 11:04:49 +02:00

test_jobs.py

Rename backup and restore job stages from addon(s) to app(s) (#7059)

2026-07-24 12:59:58 +02:00

test_mounts.py

Use systemd automount units for network mounts (#7167)

2026-08-31 20:30:23 +02:00

test_multicast.py

Add one-shot mode and docker-given totals to stats API (#7168)

2026-08-31 17:11:38 +02:00

test_network.py

Refactor API registration to support v1/v2 via shared methods (#6769)

2026-04-27 23:39:47 +02:00

test_observer.py

Add one-shot mode and docker-given totals to stats API (#7168)

2026-08-31 17:11:38 +02:00

test_os.py

Add /time API for setting NTP servers on HAOS (#7181)

2026-09-02 17:22:20 +02:00

test_panel.py

Add blockbuster library and find I/O from unit tests (#5731)

2025-03-06 16:40:13 -05:00

test_proxy.py

Forward Core API proxy paths byte-for-byte and match deny rules on decoded path (#7225)

2026-09-15 13:11:08 +02:00

test_require_running_system.py

Block start/restart/rebuild/update APIs while Supervisor is not fully running (#7194)

2026-09-15 14:45:26 +02:00

test_resolution.py

Use systemd automount units for network mounts (#7167)

2026-08-31 20:30:23 +02:00

test_root.py

Start the Supervisor auto update on every version reload (#7201)

2026-09-14 15:56:21 +02:00

test_security.py

Drop redundant @pytest.mark.asyncio decorators (#6795)

2026-05-04 14:48:18 +02:00

test_services.py

Rename addon/addons to app/apps in filenames and imports (#6837)

2026-05-13 20:55:46 +02:00

test_store.py

Block start/restart/rebuild/update APIs while Supervisor is not fully running (#7194)

2026-09-15 14:45:26 +02:00

test_supervisor.py

Start the Supervisor auto update on every version reload (#7201)

2026-09-14 15:56:21 +02:00

test_time.py

Add /time API for setting NTP servers on HAOS (#7181)

2026-09-02 17:22:20 +02:00