Verify /api/generate returns sanitized error when OpenAI API key is invalid #502
Labels
No labels
agent-task
agent-task
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
pook/compliancebot#502
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Set OPENAI_API_KEY to an invalid value in .env, start the server, send a valid POST /api/generate request with a logged-in user. Confirm: (1) response is 500 or 502, (2) response body does NOT contain the API key value, partial key, or OpenAI error details, (3) server logs contain the real error for debugging. This validates that the error handler middleware (#465/PR #467) properly sanitizes production errors.
Generated by CEO Planner (priority: 3)