code/member-dashboard
2
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Show key fingerprint instead of full token; reveal key once inline on create

Browse Source
This commit is contained in:
inference-bot committed 2026-09-24 08:00:07 -06:00
1 parent 7c7f8840c3
commit 364d618d1f
1 file changed
+29 -4
Download Patch File Download Diff File Expand all files Collapse all files
app/main.py
+29 -4
View File
@@ -315,6 +315,17 @@ PAGE_HTML = """<!DOCTYPE html>
}
.new-key input:focus { outline: none; border-color: var(--green-mid); }
.hint { color: var(--muted); font-size: 12px; margin-top: 10px; }
.key-reveal {
margin-top: 16px; padding: 16px;
background: #eaf3ea; border: 1px solid var(--green-mid); border-radius: 10px;
}
.key-reveal-title { font-weight: 700; font-size: 14px; margin-bottom: 4px; }
.key-reveal-name { color: var(--muted); font-size: 12px; margin-bottom: 8px; }
.key-reveal-value {
display: block; font-family: ui-monospace, 'SF Mono', Menlo, monospace;
font-size: 12px; background: #fff; padding: 8px 10px; border-radius: 6px;
word-break: break-all; margin-bottom: 10px; user-select: all;
}
.empty { color: var(--muted); font-size: 14px; padding: 12px 0; }
.flash {
padding: 12px 16px; border-radius: 8px; margin-top: 16px; font-size: 14px;
@@ -397,6 +408,12 @@ PAGE_HTML = """<!DOCTYPE html>
<button class="primary" id="create-btn" onclick="createKey()">Create key</button>
</div>
<div class="flash" id="flash"></div>
<div class="key-reveal" id="key-reveal" style="display:none;">
<div class="key-reveal-title">Copy your key now — it won't be shown again</div>
<div class="key-reveal-name" id="key-reveal-name"></div>
<code class="key-reveal-value" id="key-reveal-value"></code>
<button class="ghost" onclick="$('key-reveal').style.display='none';">Dismiss</button>
</div>
</div>
</div>
@@ -475,12 +492,12 @@ function renderKeys(keys) {
return;
}
el.innerHTML = keys.map(k => {
const token = k.sk_token || '';
const fp = k.fingerprint || '';
const created = k.created_at ? ' · created ' + k.created_at.slice(0,10) : '';
return '<div class="key-row">' +
'<div><div class="key-name">' + escapeHtml(k.name) + '</div>' +
'<div class="key-meta">' + escapeHtml(created) + '</div>' +
(token ? '<div class="key-token">' + escapeHtml(token) + '</div>' : '') +
'<div class="key-meta">' + escapeHtml(created) +
(fp ? ' · ends …' + escapeHtml(fp) : '') + '</div>' +
'</div>' +
'<button class="ghost" data-name="' + escapeHtml(k.name) + '" onclick="revokeKey(this.dataset.name)">Revoke</button>' +
'</div>';
@@ -503,7 +520,15 @@ async function createKey() {
const d = await r.json();
if (d.error) { flash(d.error, false); }
else {
flash('Key created — copy it now, it won\u2019t be shown again.', true);
const token = d.sk_token || '';
if (token) {
// Reveal the key ONCE, inline, copyable. It is never shown again.
const box = $('key-reveal');
box.style.display = 'block';
$('key-reveal-value').textContent = token;
$('key-reveal-name').textContent = name;
navigator.clipboard?.writeText(token).catch(() => {});
}
$('new-name').value = '';
load();
}