[wp-trac] [WordPress Trac] #64819: Revisit AI provider API key masking & validation

WordPress Trac noreply at wordpress.org
Thu Mar 12 12:13:28 UTC 2026


#64819: Revisit AI provider API key masking & validation
--------------------------+-------------------------------
 Reporter:  swissspidy    |       Owner:  jorgefilipecosta
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:  7.0
Component:  AI            |     Version:  trunk
 Severity:  normal        |  Resolution:  fixed
 Keywords:  has-patch     |     Focuses:
--------------------------+-------------------------------

Comment (by jorgefilipecosta):

 Thank you for raising this @swissspidy. The issues you noticed should be
 addressed.
 Now masking happens at the REST API level instead of get_option level, so
 WP CLI returns full keys.
 Validation happens when updating a key in REST, and on the data structure
 passed to the client (in case a key gets revoked). I removed the
 validation during setting retrieval. WP CLI should be able to set any key
 now.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/64819#comment:9>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list