[wp-trac] [WordPress Trac] #64819: Revisit AI provider API key masking & validation
WordPress Trac
noreply at wordpress.org
Thu Mar 12 12:13:28 UTC 2026
#64819: Revisit AI provider API key masking & validation
--------------------------+-------------------------------
Reporter: swissspidy | Owner: jorgefilipecosta
Type: defect (bug) | Status: closed
Priority: normal | Milestone: 7.0
Component: AI | Version: trunk
Severity: normal | Resolution: fixed
Keywords: has-patch | Focuses:
--------------------------+-------------------------------
Comment (by jorgefilipecosta):
Thank you for raising this @swissspidy. The issues you noticed should be
addressed.
Now masking happens at the REST API level instead of get_option level, so
WP CLI returns full keys.
Validation happens when updating a key in REST, and on the data structure
passed to the client (in case a key gets revoked). I removed the
validation during setting retrieval. WP CLI should be able to set any key
now.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/64819#comment:9>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list