Function maskAPIKey

internal/server/handlers_admin.go:93–101

maskAPIKey returns the display form of a sensitive setting value. Keys longer than 8 chars show their first and last 4 chars (abcd...wxyz); shorter non-empty keys collapse to "****". Empty stays empty. This is the single source of truth for the mask format — handleGetPlatformSettings emits it and ha

(key string)

// for the mask format — handleGetPlatformSettings emits it and
// handleUpdatePlatformSettings uses it to detect an unchanged (echoed-back) key.
func maskAPIKey(key string) string {
	if len(key) > 8 {
		return key[:4] + "..." + key[len(key)-4:]
	}
	if key != "" {
		return "****"
	}
	return ""
}

// handleUpdatePlatformSettings updates one or more platform settings.
// Admin-only. Accepts a JSON object of key-value pairs.