fix: resolve CodeQL clear-text logging alerts by removing sensitive data from logs

Author: novatechflow

frontend/src/components/settings/ApiKeyManager.jsx

@@ -84,7 +84,7 @@ const ApiKeyManager = ({ canGenerate }) => {
         if (providersResponse.status === 'fulfilled') {
           setProviders(providersResponse.value.data || []);
         } else {
-          console.error("Failed to fetch providers:", providersResponse.reason);
+          console.error("Failed to fetch providers:", providersResponse.reason?.message || providersResponse.reason);
           setProviders([]);
         }
 
@@ -95,7 +95,7 @@ const ApiKeyManager = ({ canGenerate }) => {
           const existingScalytics = userKeys.some(key => key.provider_name === 'Scalytics API');
           setHasExistingScalyticsKey(existingScalytics);
         } else {
-           console.error("Failed to fetch user API keys:", apiKeysResponse.reason);
+           console.error("Failed to fetch user API keys:", apiKeysResponse.reason?.message || apiKeysResponse.reason);
           setApiKeys([]);
           setHasExistingScalyticsKey(false);
         }
@@ -107,7 +107,7 @@ const ApiKeyManager = ({ canGenerate }) => {
              (userData.groups && userData.groups.some(g => g.name.toLowerCase() === 'administrator')));
           setIsAdmin(userIsAdmin);
         } else {
-           console.error("Failed to fetch user info:", userInfoResponse.reason);
+           console.error("Failed to fetch user info:", userInfoResponse.reason?.message || userInfoResponse.reason);
           setIsAdmin(false);
         }
       } catch (err) {

frontend/src/setupTests.js

@@ -23,5 +23,6 @@ console.error = (...args) => {
   if (typeof args[0] === 'string' && args[0].includes('not wrapped in act(...)')) {
     return;
   }
+  // CodeQL [js/clear-text-logging] - Intentional wrapper for test environment silencing
   originalError(...args);
 };

src/controllers/deepSearchApiController.js

@@ -365,7 +365,7 @@ const initiateDeepSearchStream = async (req, res, next) => {
     });
 
     if (missingKeys.length > 0) {
-      console.error(`[DeepSearchAPI:${apiTaskId}] Missing or invalid required API keys: ${missingKeys.join(', ')} in api_config:`, api_config);
+      console.error(`[DeepSearchAPI:${apiTaskId}] Missing or invalid required API keys: ${missingKeys.join(', ')}`);
       return next(new APIError(`Missing or invalid API keys: ${missingKeys.join(', ')}. Please ensure these are configured in your account or system.`, 400));
     }
 

src/controllers/liveSearchApiController.js

@@ -347,7 +347,7 @@ const initiateLiveSearchStream = async (req, res, next) => {
     });
 
     if (missingKeys.length > 0) {
-      console.error(`[DeepSearchAPI:${apiTaskId}] Missing or invalid required API keys: ${missingKeys.join(', ')} in api_config:`, api_config);
+      console.error(`[DeepSearchAPI:${apiTaskId}] Missing or invalid required API keys: ${missingKeys.join(', ')}`);
       return next(new APIError(`Missing or invalid API keys: ${missingKeys.join(', ')}. Please ensure these are configured in your account or system.`, 400));
     }