- Shipped
- September 5, 2026 at 7:25 AM UTC
- Author
- Kamo
- Commit
- 6e89f0a
The Apple iCloud / custom CalDAV panel shows four empty boxes whether or not a username and password are on file. It cannot do otherwise -- a stored password is never sent to the browser, and the fields are cleared whenever the provider selection changes -- so an admin had no way to tell a configured server from an unconfigured one, and the way to find out was to re-type the password. Saving with the boxes blank deliberately keeps what is stored, which made the ambiguity worse: an empty form and a full one do the same thing. The org endpoints now report hasCredentials, which is the one true thing that can be said about a secret without disclosing it, and this reads it. Only for the row's OWN provider: one org-level row holds one provider at a time, so a password stored while the org was on Apple says nothing about the custom server now selected.