Infos:
- Used Zammad version: 6.3.1
- Used Zammad installation type: package
- Operating system: Debian 12
- Browser + version: Chrome
Expected behavior:
- Following the release notes for Zammad 6.0, the auth token should not be echoed in the response body of the health api
Actual behavior:
- The token is there:
{"healthy":true,"message":"success","issues":[],"actions":[],"token":"R-Mxxxxxxxxxxxxx"}
Steps to reproduce the behavior:
- Open api/v1/monitoring/health_check in your browser