ChrisChen/ROLAC
1
0
Fork 0
Code Issues 66 Pull Requests Actions Packages Projects Releases Wiki Activity

feat(church-profile): masked-read + leave-unchanged write for AI keys

Browse Source
This commit is contained in:
Chris Chen
2026-06-25 13:13:42 -07:00
parent 75905e7036
commit a16e21dbfd
3 changed files with 132 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
API/ROLAC.API/DTOs/Disbursement/ChurchProfileDtos.cs
+10
View File
@@ -17,6 +17,11 @@ public class ChurchProfileDto
public string? BankAccountNumber { get; set; }
public string? BankRoutingNumber { get; set; }
public int NextCheckNumber { get; set; }
public string AiProvider { get; set; } = "Claude";
public string? ClaudeModel { get; set; }
public string? ClaudeApiKeyMasked { get; set; }
public string? GeminiModel { get; set; }
public string? GeminiApiKeyMasked { get; set; }
}
public class UpdateChurchProfileRequest
@@ -34,4 +39,9 @@ public class UpdateChurchProfileRequest
[MaxLength(50)] public string? BankAccountNumber { get; set; }
[MaxLength(50)] public string? BankRoutingNumber { get; set; }
[Range(1, int.MaxValue)] public int NextCheckNumber { get; set; }
[MaxLength(20)] public string AiProvider { get; set; } = "Claude";
[MaxLength(100)] public string? ClaudeModel { get; set; }
[MaxLength(500)] public string? ClaudeApiKey { get; set; } // null/blank = leave unchanged
[MaxLength(100)] public string? GeminiModel { get; set; }
[MaxLength(500)] public string? GeminiApiKey { get; set; } // null/blank = leave unchanged
}
API/ROLAC.API/Services/ChurchProfileService.cs
+19
View File
@@ -19,6 +19,11 @@ public class ChurchProfileService : IChurchProfileService
Website = p.Website, Address = p.Address, City = p.City, State = p.State,
ZipCode = p.ZipCode, BankName = p.BankName, BankAccountNumber = p.BankAccountNumber,
BankRoutingNumber = p.BankRoutingNumber, NextCheckNumber = p.NextCheckNumber,
AiProvider = p.AiProvider,
ClaudeModel = p.ClaudeModel,
ClaudeApiKeyMasked = Mask(p.ClaudeApiKey),
GeminiModel = p.GeminiModel,
GeminiApiKeyMasked = Mask(p.GeminiApiKey),
};
}
@@ -29,6 +34,12 @@ public class ChurchProfileService : IChurchProfileService
p.Website = r.Website; p.Address = r.Address; p.City = r.City; p.State = r.State;
p.ZipCode = r.ZipCode; p.BankName = r.BankName; p.BankAccountNumber = r.BankAccountNumber;
p.BankRoutingNumber = r.BankRoutingNumber; p.NextCheckNumber = r.NextCheckNumber;
p.AiProvider = string.IsNullOrWhiteSpace(r.AiProvider) ? "Claude" : r.AiProvider;
p.ClaudeModel = r.ClaudeModel;
p.GeminiModel = r.GeminiModel;
// Leave-unchanged semantics: only overwrite a stored key when a new value is supplied.
if (!string.IsNullOrWhiteSpace(r.ClaudeApiKey)) p.ClaudeApiKey = r.ClaudeApiKey;
if (!string.IsNullOrWhiteSpace(r.GeminiApiKey)) p.GeminiApiKey = r.GeminiApiKey;
await _db.SaveChangesAsync();
}
@@ -43,4 +54,12 @@ public class ChurchProfileService : IChurchProfileService
}
return p;
}
/// <summary>Mask a stored secret for display: 6 bullets + last 4 chars; fully masked when ≤4 chars.</summary>
private static string Mask(string? key)
{
if (string.IsNullOrEmpty(key)) return "";
if (key.Length <= 4) return new string('•', key.Length);
return new string('•', 6) + key[^4..];
}
}