From 505f6c851a7603b23e0e8b790f9802078f321dac Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Stefan=20B=C3=BCrk?= <stefan@buerk.tech>
Date: Sun, 7 Jun 2026 20:19:13 +0200
Subject: [PATCH] [TASK] DPL-158: Blind configuration options

Hide sensitive data in configuration module using
the `ModifyBlindedConfigurationOptionsEvent`.
---
 ...BlindConfigurationOptionsEventListener.php | 23 +++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 Classes/Event/Listener/BlindConfigurationOptionsEventListener.php

diff --git a/Classes/Event/Listener/BlindConfigurationOptionsEventListener.php b/Classes/Event/Listener/BlindConfigurationOptionsEventListener.php
new file mode 100644
index 0000000..8b4e0d5
--- /dev/null
+++ b/Classes/Event/Listener/BlindConfigurationOptionsEventListener.php
@@ -0,0 +1,23 @@
+<?php
+
+declare(strict_types=1);
+
+namespace WebVision\DeeplWrite\Event\Listener;
+
+use TYPO3\CMS\Core\Attribute\AsEventListener;
+use TYPO3\CMS\Lowlevel\Event\ModifyBlindedConfigurationOptionsEvent;
+
+final readonly class BlindConfigurationOptionsEventListener
+{
+    #[AsEventListener(
+        identifier: 'deepl-write/blind-configuration-options',
+    )]
+    public function __invoke(ModifyBlindedConfigurationOptionsEvent $event): void
+    {
+        $options = $event->getBlindedConfigurationOptions();
+        if ($event->getProviderIdentifier() === 'confVars') {
+            $options['TYPO3_CONF_VARS']['EXTENSIONS']['deepl_write']['apiKey'] = '******';
+        }
+        $event->setBlindedConfigurationOptions($options);
+    }
+}