regenerate_api_key() only updated users.api_key_hash/prefix, leaving the backfilled 'Default (legacy)' row in api_keys stale after rotation — not a security issue (the old hash was still correctly rejected) but the Tokens page would show a wrong/orphaned prefix for a key that no longer works. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Description
No description provided
Languages
Python
100%