mywhoosh2garmin

Go to file

Bastian Wagner d2ac079870 fix: reject empty credential fields with 400 instead of 500

Add an explicit non-empty check before encrypting user-submitted
email/password fields in the create and update user routes, so a
request that bypasses the HTML `required` attribute gets a clean
400 instead of an unhandled ValueError from CredentialCipher.encrypt
propagating as a 500. Applies to all four credential fields on
create, and to the two email fields on update (the password-blank-
means-keep-existing behavior on update is unchanged).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-08-15 09:50:05 +02:00

app

fix: reject empty credential fields with 400 instead of 500

2026-08-15 09:50:05 +02:00

docs/superpowers

roadmap

2026-08-15 09:07:40 +02:00

reference

2026-08-15 09:04:38 +02:00

tests

fix: reject empty credential fields with 400 instead of 500

2026-08-15 09:50:05 +02:00