feat(security): require setup token for admin init and restore [BE-13029] (#2770)

2026-06-04 09:15:23 +03:00
parent dab0cf48c6
commit d2b56efcb4
24 changed files with 431 additions and 74 deletions
@@ -20,11 +20,12 @@ func hideFields(settings *portainer.Settings) {
 // Handler is the HTTP handler used to handle settings operations.
 type Handler struct {
 	*mux.Router
-	DataStore       dataservices.DataStore
-	FileService     portainer.FileService
-	JWTService      portainer.JWTService
-	LDAPService     portainer.LDAPService
-	SnapshotService portainer.SnapshotService
+	DataStore          dataservices.DataStore
+	FileService        portainer.FileService
+	JWTService         portainer.JWTService
+	LDAPService        portainer.LDAPService
+	SnapshotService    portainer.SnapshotService
+	SetupTokenRequired bool
 }

 // NewHandler creates a handler to manage settings operations.