From 979b81c8548cee6e07a399b2e6709041a8788451 Mon Sep 17 00:00:00 2001 From: Dirk Julich Date: Thu, 23 Apr 2026 18:45:20 +0200 Subject: [PATCH] Include survey_passwords when validating extra_vars prompts prompts_dict() emits survey_passwords alongside extra_vars. _accept_or_ignore_job_kwargs uses it to decrypt encrypted survey values before validation. Without it, encrypted password blobs are validated as-is against the survey spec. Co-Authored-By: Claude Opus 4.6 --- awx/api/serializers.py | 1 + 1 file changed, 1 insertion(+) diff --git a/awx/api/serializers.py b/awx/api/serializers.py index 74b536b108..c65a00cc9d 100644 --- a/awx/api/serializers.py +++ b/awx/api/serializers.py @@ -4149,6 +4149,7 @@ class LaunchConfigurationBaseSerializer(BaseSerializer): requested_prompt_fields = incoming_attr_keys & ask_mapping_keys if 'extra_data' in incoming_attr_keys: requested_prompt_fields.add('extra_vars') + requested_prompt_fields.add('survey_passwords') # prompts_dict() pulls persisted M2M state (labels, credentials, # instance_groups) via the instance pk. Only re-validate the full prompt