mARTin-B78/tts-voice-creator-clone-and-design-2
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: record API key cache policy

Browse Source
This commit is contained in:
mARTin-B78 2026-09-04 08:53:12 +02:00
parent 1c0c985d34
commit 9637784833
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGELOG.md
View File

@ -21,6 +21,8 @@ Follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/) · versioned wi
prompt resolution, and per-form portrait/reference assets. prompt resolution, and per-form portrait/reference assets.
### Changed ### Changed
- **API Key Handoff Cache Policy.** Settings and explicit external-key regeneration responses now send `no-store`
headers so browser and intermediary caches cannot retain the client-visible access-key handoff.
- **API Boundary Hardening.** External API authentication is enabled by default, request and mutation limits are - **API Boundary Hardening.** External API authentication is enabled by default, request and mutation limits are
enforced, and settings responses redact provider credentials for non-browser callers. enforced, and settings responses redact provider credentials for non-browser callers.
- **Server-side Provider Credentials.** Provider keys are now masked even for same-origin Settings responses, are - **Server-side Provider Credentials.** Provider keys are now masked even for same-origin Settings responses, are