精简: 去掉 Telegram 机器人+通知: tgbot 包/stats-notify 与 hash 清理 job/登录通知/backuptotgbot/testTgBot/全部 tg* 设置/locale Bot 本地化/SecretClears 机制; 连带清理 Swagger/外部流量/邮件/2FA 的残留测试

internal/web/service/setting_factory_defaults_test.go

@@ -54,9 +54,6 @@ func TestGetFactoryDefaultsOmitsSensitiveMaterial(t *testing.T) {
 		"nodeMtlsClientKeyPem",
 		"nodeMtlsClientCertSha256",
 		"xrayTemplateConfig",
-		"tgBotToken",
-		"twoFactorToken",
-		"smtpPassword",
 	} {
 		t.Run(key, func(t *testing.T) {
 			if _, ok := defaults[key]; ok {
@@ -75,9 +72,6 @@ func TestGetFactoryDefaultsInvariant(t *testing.T) {
 			if !tags[key] {
 				t.Errorf("key %q is not an entity.AllSetting json tag", key)
 			}
-			if factoryDefaultSecretKeys[key] {
-				t.Errorf("key %q is in the credential deny-list and must not be returned", key)
-			}
 		})
 	}
 }