n0ctal 34c248bb79 fix(cli): stop -getApiToken accumulating admin tokens (#6175) ...

* fix(cli): stop -getApiToken accumulating admin tokens

`x-ui setting -getApiToken` reads like a getter, but when tokens already exist
it minted a brand-new one named `cli-fallback-<unix>` on every invocation. The
plaintext is printed once and the row stays enabled forever, so an operator who
runs the command a few times while debugging silently leaves several
admin-equivalent credentials behind that nobody can tell apart or revoke
knowingly.

Keep the convenience the fallback was added for, but rotate a single
`cli-fallback` token instead: RecreateByName drops any existing row with that
name before issuing a new one, so at most one CLI-issued token exists at a time
and the previous plaintext stops working.

* fix(api-token): preserve token on failed replacement

---------

Co-authored-by: n0ctal <293235942+n0ctal@users.noreply.github.com>

2026-08-14 20:12:43 +02:00

..

config

v3.6.0

2026-07-30 03:15:28 +02:00

database

fix(database): keep IP limits when the fail2ban probe is inconclusive (#6176)

2026-08-14 20:12:07 +02:00

eventbus

chore: refresh dependencies, fix Linux tool tasks, modernize Go idioms

2026-07-25 16:08:09 +02:00

logger

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

mtproto

fix(mtproto): synchronize child-process lifecycle (#6141)

2026-07-29 20:56:26 +02:00

sub

fix(sub): render the full remark once per subscription, not once per credential (#6198)

2026-08-14 20:00:51 +02:00

tunnelmonitor

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

util

fix(outbound): import Hysteria2 salamander properly from standard obfs params (#6166)

2026-08-14 16:43:29 +02:00

web

fix(cli): stop -getApiToken accumulating admin tokens (#6175)

2026-08-14 20:12:43 +02:00

xray

fix dead code, typo, and minor bugs in main.go, process.go and index.go (#6167)

2026-07-31 18:27:46 +02:00