From 57e48b432cbca85374dd2d343196398e614a262d Mon Sep 17 00:00:00 2001
From: Nick Sweeting <github@sweeting.me>
Date: Tue, 20 Aug 2024 19:25:16 -0700
Subject: [PATCH] show redacted API tokens in django admin

---
 archivebox/api/models.py | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/archivebox/api/models.py b/archivebox/api/models.py
index dfa6d3dc..c6363379 100644
--- a/archivebox/api/models.py
+++ b/archivebox/api/models.py
@@ -49,7 +49,7 @@ class APIToken(ABIDModel):
         return self.token
 
     def __repr__(self) -> str:
-        return f'<APIToken user={self.created_by.username} token=************{self.token[-4:]}>'
+        return f'<APIToken user={self.created_by.username} token={self.token_redacted}>'
 
     def __json__(self) -> dict:
         return {
@@ -68,6 +68,10 @@ class APIToken(ABIDModel):
         expiry_date = self.expires or (timezone.now() + timedelta(days=365 * 100))
 
         return expiry_date.isoformat()
+    
+    @property
+    def token_redacted(self):
+        return f'************{self.token[-4:]}'
 
     def is_valid(self, for_date=None):
         for_date = for_date or timezone.now()