fix(channels): remove duplicate EncryptSensitiveFields call in Create

The Create handler called EncryptSensitiveFields twice (copy-paste error introduced during the OFFSEC-010 conflict resolution at commit 58882381). The second call is harmless — EncryptSensitiveFields is idempotent and skips values already prefixed with "ec1:" — but it wastes CPU and signals a copy-paste bug. Remove it. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-15 01:18:22 +00:00
1 changed files with 0 additions and 9 deletions
@@ -149,15 +149,6 @@ func (h *ChannelHandler) Create(c *gin.Context) {
 		return
 	}

-	// #319: encrypt sensitive fields (bot_token, webhook_secret) before
-	// persisting so a DB read/backup leak can't recover the credentials.
-	// Validation above ran against plaintext; storage is ciphertext.
-	if err := channels.EncryptSensitiveFields(body.Config); err != nil {
-		log.Printf("Channels: encrypt config failed for workspace %s: %v", workspaceID, err)
-		c.JSON(http.StatusInternalServerError, gin.H{"error": "encrypt failed"})
-		return
-	}
-
 	configJSON, _ := json.Marshal(body.Config)
 	allowedJSON, _ := json.Marshal(body.AllowedUsers)
 	enabled := true