grimmory auth

config.py

@@ -54,8 +54,8 @@ def load() -> AppConfig:
 def save(form: dict) -> None:
     keys = [
         "sftp_host", "sftp_port", "sftp_user", "sftp_auth_method",
-        "sftp_password", "sftp_remote_path",
-        "grimmory_url", "grimmory_user", "grimmory_password", "grimmory_bookdrop_path",
+        "sftp_remote_path",
+        "grimmory_url", "grimmory_user", "grimmory_bookdrop_path",
         "work_dir",
         "scheduler_interval_minutes", "sync_batch_size",
     ]
@@ -63,6 +63,7 @@ def save(form: dict) -> None:
         if key in form and form[key] is not None:
             db.set_setting(key, str(form[key]))
 
-    # Only overwrite the SSH key if a non-empty value was submitted
-    if form.get("sftp_key", "").strip():
-        db.set_setting("sftp_key", form["sftp_key"].strip())
+    # Only overwrite secrets if a non-empty value was submitted
+    for secret in ("sftp_key", "sftp_password", "grimmory_password"):
+        if form.get(secret, "").strip():
+            db.set_setting(secret, form[secret].strip())