Publish curated Unraid-AppOps-Gateway source from 68878c3167dacf2b424c16780e60e0d60815e477

backend/app/main.py

@@ -12,6 +12,8 @@ from uuid import uuid4
 from fastapi import Depends, FastAPI, HTTPException
 from fastapi.middleware.cors import CORSMiddleware
 from fastapi.responses import FileResponse, JSONResponse
+from fastapi.exceptions import RequestValidationError
+from fastapi.exception_handlers import request_validation_exception_handler
 from fastapi.staticfiles import StaticFiles
 from sqlmodel import Session
 from starlette.types import ASGIApp, Message, Receive, Scope, Send
@@ -361,6 +363,15 @@ app.include_router(setup_router)
 app.include_router(runtime_router)
 app.include_router(deployments_router)
 app.include_router(enrollments_router)
+
+
+@app.exception_handler(RequestValidationError)
+async def validation_error_response(request, exc):
+    # Root template input accepts no credentials. Never echo an accidentally
+    # submitted secret through Pydantic's validation-error input field.
+    if request.url.path == "/api/enrollments/trust/oidc-profile":
+        return JSONResponse(status_code=422, content={"detail": "invalid_oidc_profile"})
+    return await request_validation_exception_handler(request, exc)
 app.include_router(integrations_router)
 app.include_router(n8n_router)
 app.include_router(knowledge_router)