Fix audit findings in queue fairness and official account lifecycle

2026-10-05 00:21:17 +08:00
parent b76af5ada3
commit a180dbc076
12 changed files with 285 additions and 37 deletions
@@ -147,7 +147,12 @@ def create_app(settings=None, start_worker=True):
        )
        if any(
            s and s in request.state.request_id
-            for s in [settings.api_key, settings.api_token, *registry.keys]
+            for s in [
+                settings.api_key,
+                settings.api_token,
+                *registry.keys,
+                *settings.additional_secrets,
+            ]
        ):
            request.state.request_id = uuid4().hex
        if request.method in ["POST", "PUT", "DELETE"]: