Marc-André Bombeck d750c1827e fix(settings): stop ntfy PUT from clearing the stored auth token on unrelated edits ...

PUT /api/settings/ntfy reconstructed the entire stored config from the
request body. GET never returns the write-only authToken (only
hasAuthToken), so clients correctly omit it on any edit that doesn't
touch the credential — but the route treated an omitted or empty token
as "clear it", silently destroying a working notification credential on
routine edits like toggling enabled.

An omitted or empty authToken now preserves the currently stored value;
only a non-empty value replaces it. Mirrors the identical headerValue
preserve-on-empty contract already shipped on the webhook channel route.

2026-07-23 09:28:39 +02:00

..

__tests__

fix(settings): stop ntfy PUT from clearing the stored auth token on unrelated edits

2026-07-23 09:28:39 +02:00

account

merge: remove the bug-report integration for v1.23

2026-06-27 20:47:24 +02:00

data

feat(security): require fresh verification before destructive account actions

2026-06-27 20:34:11 +02:00

email

release: v1.32.0 — hardening and scalability (#580)

2026-07-22 04:14:15 +02:00

global-services

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

moodlog

fix(api): bound every JSON body read

2026-06-10 11:36:51 +02:00

ntfy

fix(settings): stop ntfy PUT from clearing the stored auth token on unrelated edits

2026-07-23 09:28:39 +02:00

privacy-summary

feat(privacy): add a Data & Privacy dashboard

2026-06-27 21:50:30 +02:00

reminder-thresholds

feat(medications): make low-stock alert reorder-lead-time aware

2026-06-14 20:39:06 +02:00

telegram

release: v1.32.0 — hardening and scalability (#580)

2026-07-22 04:14:15 +02:00

webhook

release: v1.32.0 — hardening and scalability (#580)

2026-07-22 04:14:15 +02:00