From 88a13a416996b40d617a1d396fecae4563095474 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Stefan=20B=C3=BCrk?= <stefan@buerk.tech>
Date: Sun, 7 Jun 2026 20:19:13 +0200
Subject: [PATCH] [TASK] DPL-158: Blind configuration options

Hide sensitive data in configuration module using
the `ModifyBlindedConfigurationOptionsEvent`.

Backport of #34
---
 ...BlindConfigurationOptionsEventListener.php | 19 +++++++++++++++++++
 .../RenderWriteSelectEventListener.php        |  4 ----
 Configuration/Services.yaml                   | 12 ++++++++++++
 3 files changed, 31 insertions(+), 4 deletions(-)
 create mode 100644 Classes/Event/Listener/BlindConfigurationOptionsEventListener.php

diff --git a/Classes/Event/Listener/BlindConfigurationOptionsEventListener.php b/Classes/Event/Listener/BlindConfigurationOptionsEventListener.php
new file mode 100644
index 0000000..dc7971d
--- /dev/null
+++ b/Classes/Event/Listener/BlindConfigurationOptionsEventListener.php
@@ -0,0 +1,19 @@
+<?php
+
+declare(strict_types=1);
+
+namespace WebVision\DeeplWrite\Event\Listener;
+
+use TYPO3\CMS\Lowlevel\Event\ModifyBlindedConfigurationOptionsEvent;
+
+final class BlindConfigurationOptionsEventListener
+{
+    public function __invoke(ModifyBlindedConfigurationOptionsEvent $event): void
+    {
+        $options = $event->getBlindedConfigurationOptions();
+        if ($event->getProviderIdentifier() === 'confVars') {
+            $options['TYPO3_CONF_VARS']['EXTENSIONS']['deepl_write']['apiKey'] = '******';
+        }
+        $event->setBlindedConfigurationOptions($options);
+    }
+}
diff --git a/Classes/Event/Listener/RenderWriteSelectEventListener.php b/Classes/Event/Listener/RenderWriteSelectEventListener.php
index dd252e8..efeb2c1 100644
--- a/Classes/Event/Listener/RenderWriteSelectEventListener.php
+++ b/Classes/Event/Listener/RenderWriteSelectEventListener.php
@@ -5,13 +5,9 @@
 namespace WebVision\DeeplWrite\Event\Listener;
 
 use TYPO3\CMS\Backend\Controller\Event\RenderAdditionalContentToRecordListEvent;
-use TYPO3\CMS\Core\Attribute\AsEventListener;
 use TYPO3\CMS\Core\Site\Entity\Site;
 use WebVision\DeeplWrite\Generator\WriteDropdownGenerator;
 
-#[AsEventListener(
-    identifier: 'deeplWrite/render-select'
-)]
 final class RenderWriteSelectEventListener
 {
     public function __construct(
diff --git a/Configuration/Services.yaml b/Configuration/Services.yaml
index be5b1f0..a0a3d46 100644
--- a/Configuration/Services.yaml
+++ b/Configuration/Services.yaml
@@ -36,3 +36,15 @@ services:
         identifier: 'deepl-write/translation-dropdown'
         event: WebVision\Deepl\Base\Event\ViewHelpers\ModifyInjectVariablesViewHelperEvent
         after: 'deepl-base/default-translation, deepltranslate-core/translation-dropdown'
+
+  WebVision\DeeplWrite\Event\Listener\RenderWriteSelectEventListener:
+    tags:
+      - name: 'event.listener'
+        identifier: 'deeplWrite/render-select'
+        event: TYPO3\CMS\Backend\Controller\Event\RenderAdditionalContentToRecordListEvent
+
+  WebVision\DeeplWrite\Event\Listener\BlindConfigurationOptionsEventListener:
+    tags:
+      - name: 'event.listener'
+        identifier: 'deepl-write/blind-configuration-options'
+        event: TYPO3\CMS\Lowlevel\Event\ModifyBlindedConfigurationOptionsEvent