fix(api): isolate sensitive idempotency responses

2026-07-24 22:45:50 +04:00 · 2026-07-24 22:45:50 +04:00 · 3b3aad6065
commit 3b3aad6065
parent d57fdcc7b0
4 changed files with 231 additions and 12 deletions
--- a/lib/pleroma/web/admin_api/controllers/user_controller.ex
+++ b/lib/pleroma/web/admin_api/controllers/user_controller.ex
@ -152,6 +152,13 @@ defmodule Pleroma.Web.AdminAPI.UserController do
        } = conn,
        _
      ) do
+    conn =
+      if Enum.any?(users, fn user -> Map.get(user, :password) in ["", nil] end) do
+        put_private(conn, :skip_idempotency_cache, true)
+      else
+        conn
+      end
+
    multi =
      users
      |> Enum.map(fn %{nickname: nickname, email: email} = attrs ->