provider的apikey自己会换

[kelvkhiu]

当你改priority或其他设置，存了后，apikey自己改。

[kelvkhiu]

[github-actions]

Thank you for reporting this issue.

Analysis:

After investigating the codebase, the form logic for editing providers correctly handles the API key field:

• In edit mode, the key field is initialized to an empty string (src/app/[locale]/settings/providers/_components/forms/provider-form/provider-form-context.tsx:35)
• On form submission, the key is only included in the update payload if the user explicitly typed a new value (src/app/[locale]/settings/providers/_components/forms/provider-form/index.tsx:351):

  const editFormData = trimmedKey ? { ...baseFormData, key: trimmedKey } : baseFormData;

This means the server-side logic itself should not overwrite the key when saving other fields like priority.

Most likely root cause: Browser autofill

The password input field for the API key (src/app/[locale]/settings/providers/_components/forms/provider-form/sections/basic-info-section.tsx:185-192) uses type="password" but does not set autoComplete="off" or autoComplete="new-password". The <form> element (index.tsx:461) also lacks autoComplete="off".

This means browser password managers can silently autofill the key field with a saved password when the edit dialog opens. Since the field appears empty visually (password dots may not be obvious), the user may not notice. When they save, the autofilled value passes the trimmedKey check and overwrites the real API key in the database.

To help confirm this, please check:

• Does this happen in an incognito/private window with no saved passwords?
• Does your browser's password manager have saved credentials for this site?
• After opening the edit dialog, does clicking the "show password" eye icon reveal any pre-filled text in the API key field?

Potential fix:

Adding autoComplete="new-password" to the key <Input> in basic-info-section.tsx:185 and/or adding autoComplete="off" to the <form> element in index.tsx:461 should prevent browser autofill from silently populating the key field.

---

Automated response from Claude AI

[kelvkhiu]

yes. its password manager.