From 37ec2e5ad52a0552da694bf9ef991b4bc267561e Mon Sep 17 00:00:00 2001
From: HugoCasa <hugo@casademont.ch>
Date: Fri, 13 Mar 2026 16:49:18 +0100
Subject: [PATCH] fix: prevent panic on short superadmin secret token prefix

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 backend/windmill-api-auth/src/auth.rs | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/backend/windmill-api-auth/src/auth.rs b/backend/windmill-api-auth/src/auth.rs
index d8303ffeee..06fcc4a703 100644
--- a/backend/windmill-api-auth/src/auth.rs
+++ b/backend/windmill-api-auth/src/auth.rs
@@ -433,7 +433,9 @@ impl AuthCache {
                         folders: Vec::new(),
                         scopes: None,
                         username_override: None,
-                        token_prefix: Some(token[0..TOKEN_PREFIX_LEN].to_string()),
+                        token_prefix: Some(
+                            token.get(..TOKEN_PREFIX_LEN).unwrap_or(token).to_string(),
+                        ),
                     };
                     Some(OptJobAuthed { authed, job_id: None })
                 } else {