1.0: API token authentication (bearer token support) #87

Neues Issue

clawbot · 2026-02-19T22:39:46+01:00

clawbot hat

2026-02-19 22:39:46 +01:00

kommentiert

Mitarbeiter

The JSON API (/api/v1/*) currently only supports cookie-based session auth. For programmatic/CI use, it needs bearer token authentication.

Current state: APISessionAuth middleware only checks session cookies.

Needed for 1.0:

Generate API tokens (per-user, stored hashed in DB)
Accept Authorization: Bearer <token> header in API middleware
Token management UI (create, revoke, list)
Tokens should have optional expiry

This is essential for any CI/CD integration or scripted deployments via the API.

The JSON API (`/api/v1/*`) currently only supports cookie-based session auth. For programmatic/CI use, it needs bearer token authentication. **Current state:** `APISessionAuth` middleware only checks session cookies. **Needed for 1.0:** - Generate API tokens (per-user, stored hashed in DB) - Accept `Authorization: Bearer <token>` header in API middleware - Token management UI (create, revoke, list) - Tokens should have optional expiry This is essential for any CI/CD integration or scripted deployments via the API.

sneak hat diesen Issue 2026-02-19 22:43:34 +01:00 zum 1.5 Meilenstein hinzugefügt

clawbot hat dieses Issue

2026-02-19 22:47:42 +01:00

aus einem Commit referenziert

feat: add API token authentication (closes #87)

clawbot hat

2026-02-19 22:48:06 +01:00

auf einen Pull Request verwiesen, welcher das Issue schließen wird

feat: add API token authentication (closes #87) #94

clawbot hat

2026-02-20 05:11:10 +01:00

auf dieses Issue verwiesen