Censor Prowlarr API Key

[navy676aw]

Hey! Excellent app! However it would be great if you censored or didn't show at all my API key once I have set it in the config file. Random users would have access to my prowlarr API. I would like to be able to share the site publicly and not have my API key leaked.

[aculix]

Done. GET /api/v1/settings no longer returns stored keys, the inputs are password fields, and saving with a blank key keeps the one on file. Worth knowing: the endpoint was never authenticated, so anyone who could reach the page could read your key. If your instance is public, rotate the key and set the new BITPLAY_AUTH_USERNAME/BITPLAY_AUTH_PASSWORD env vars while you're at it.