From b2d54576d0b1974f84804c370523230b27ce991b Mon Sep 17 00:00:00 2001
From: kuaifan <aipaw@live.cn>
Date: Fri, 26 Jun 2026 01:16:43 +0000
Subject: [PATCH] =?UTF-8?q?fix(system):=20demo=20=E7=8E=AF=E5=A2=83?=
 =?UTF-8?q?=E8=B1=81=E5=85=8D=20dooai=5Fkey=20=E6=89=93=E7=A0=81=EF=BC=8C?=
 =?UTF-8?q?=E4=BF=AE=E5=A4=8D=20/ai/gateway/*=20401?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

system_setting=disabled 时按 _key 结尾统一打码会误伤官方网关 token
(dooai_key)，前端读出打码串后调 /ai/gateway/me 等接口被网关判为非法
token 返回 401。将 dooai_key 从打码规则中单独豁免，原样返回供鉴权。
---
 app/Http/Controllers/Api/SystemController.php | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/app/Http/Controllers/Api/SystemController.php b/app/Http/Controllers/Api/SystemController.php
index 8e369e90b..dcac260c3 100755
--- a/app/Http/Controllers/Api/SystemController.php
+++ b/app/Http/Controllers/Api/SystemController.php
@@ -348,6 +348,10 @@ class SystemController extends AbstractController
                 if (empty($item)) {
                     continue;
                 }
+                // dooai_key 是官方网关 token，需原样返回供鉴权
+                if ($key === 'dooai_key') {
+                    continue;
+                }
                 if (str_ends_with($key, '_key') || str_ends_with($key, '_secret')) {
                     $setting[$key] = substr($item, 0, 4) . str_repeat('*', strlen($item) - 8) . substr($item, -4);
                 }