Harden settings read sanitization for invalid providers

2026-02-21 15:15:43 -03:00
parent a69702f099
commit 1cb6bfee58
5 changed files with 162 additions and 3 deletions
--- a/doc/api-contract.md
+++ b/doc/api-contract.md
@@ -124,6 +124,7 @@ Primary implementation modules:

 - `GET /settings`
  - Response model: `AppSettingsResponse`
+  - persisted providers with invalid base URLs are ignored during read sanitization; response falls back to remaining valid providers or secure defaults
 - `PATCH /settings`
  - Body model: `AppSettingsUpdateRequest`
  - Response model: `AppSettingsResponse`