m3 Security Fixes

This commit is contained in:
Mark Gregory
2026-09-16 17:25:53 +01:00
parent 8f37245e13
commit 1733291da2
39 changed files with 1290 additions and 1740 deletions
-28
View File
@@ -1,28 +0,0 @@
# ChatGPT Module
Provides encrypted OpenAI API key storage and an Artisan command for deleting all OpenAI API files visible to the active stored key.
## Routes
- `GET /chatgpt` - manage stored API keys.
- `POST /chatgpt/settings` - create a stored API key.
- `PUT /chatgpt/settings/{setting}` - update an API key setting.
- `DELETE /chatgpt/settings/{setting}` - delete an API key setting.
## Commands
Preview files without deleting:
```bash
php artisan chatgpt:delete-api-files --dry-run
```
Delete all OpenAI API files without interactive confirmation:
```bash
php artisan chatgpt:delete-api-files
```
## Security
API keys are encrypted at rest using Laravel's encrypted Eloquent cast and the application `APP_KEY`.