Andras Bacsai 8dc79f4ed6 fix(api): expose nested server secrets for privileged tokens ...

Add `exposeNestedServerSecrets()` to Applications, Databases, and
Services controllers so that `read:sensitive`/`root` tokens see
sentinel and logdrain fields on eager-loaded Server + ServerSetting
relations.

ServicesController handles both single models and Eloquent Collections
(listing endpoint passes a Collection per project).

Tests tightened to use JSON-key assertions (`"field":`) to avoid false
positives from field names appearing in values.

2026-04-30 11:49:15 +02:00

..

ApiSensitiveFieldsTest.php

fix(api): expose nested server secrets for privileged tokens

2026-04-30 11:49:15 +02:00

AuditLogTest.php

feat(observability): add structured audit log channel for API and webhook events

2026-04-28 14:50:37 +02:00