From 6aef5aff62f58edd178d954e30981b18c2348bc2 Mon Sep 17 00:00:00 2001
From: kolaente <k@knt.li>
Date: Mon, 23 Mar 2026 16:13:58 +0100
Subject: [PATCH] fix: strip BasicAuth credentials from user webhook API
 responses

---
 pkg/routes/api/v1/user_webhooks.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkg/routes/api/v1/user_webhooks.go b/pkg/routes/api/v1/user_webhooks.go
index ef715d159..5c9d0d51e 100644
--- a/pkg/routes/api/v1/user_webhooks.go
+++ b/pkg/routes/api/v1/user_webhooks.go
@@ -63,6 +63,8 @@ func GetUserWebhooks(c *echo.Context) error {
 
 	for _, w := range ws {
 		w.Secret = ""
+		w.BasicAuthUser = ""
+		w.BasicAuthPassword = ""
 		if createdBy, has := users[w.CreatedByID]; has {
 			w.CreatedBy = createdBy
 		}