From d21f8c6b42b82b2bcfef64cbabbdc1415b50f0d4 Mon Sep 17 00:00:00 2001
From: beilunyang <786220806@qq.com>
Date: Wed, 22 Oct 2025 23:37:52 +0800
Subject: [PATCH] fix(turnstile): conditionally include secretKey in Turnstile
 configuration based on management permissions

---
 app/api/config/route.ts | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/app/api/config/route.ts b/app/api/config/route.ts
index b45124c..b0b1e91 100644
--- a/app/api/config/route.ts
+++ b/app/api/config/route.ts
@@ -32,11 +32,11 @@ export async function GET() {
     emailDomains: emailDomains || "moemail.app",
     adminContact: adminContact || "",
     maxEmails: maxEmails || EMAIL_CONFIG.MAX_ACTIVE_EMAILS.toString(),
-    turnstile: {
+    turnstile: canManageConfig ? {
       enabled: turnstileEnabled === "true",
       siteKey: turnstileSiteKey || "",
-      ...(canManageConfig ? { secretKey: turnstileSecretKey || "" } : {})
-    }
+      secretKey: turnstileSecretKey || "",
+    } : undefined
   })
 }