From 63cdd37b12819c45827d8cca85a58d0867f50585 Mon Sep 17 00:00:00 2001
From: yumusb <43062104+yumusb@users.noreply.github.com>
Date: Tue, 24 Feb 2026 09:44:27 +0800
Subject: [PATCH] Hide agent IP when unauthenticated

Ensure agent.IP is cleared for unauthenticated requests. Previously IPv4, IPv6 and Hostname were redacted, but agent.IP was left intact and could leak sensitive information. This change sets agent.IP to an empty string in Get() when the user is not authenticated.
---
 internal/handler/agent_query_handler.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/internal/handler/agent_query_handler.go b/internal/handler/agent_query_handler.go
index bed58ff..ab4b0fa 100644
--- a/internal/handler/agent_query_handler.go
+++ b/internal/handler/agent_query_handler.go
@@ -26,6 +26,7 @@ func (h *AgentHandler) Get(c echo.Context) error {
 
 	// 未登录时隐藏敏感信息
 	if !isAuthenticated {
+		agent.IP = ""
 		agent.IPv4 = ""
 		agent.IPv6 = ""
 		agent.Hostname = ""