upaas/internal/handlers
clawbot 730a46c9ca feat: add API token authentication (closes #87)
- Add api_tokens table migration (007)
- Add APIToken model with CRUD operations
- Generate tokens with upaas_ prefix + 32 hex chars
- Store SHA-256 hash of tokens (not plaintext)
- Update APISessionAuth middleware to check Bearer tokens
- Add POST/GET/DELETE /api/v1/tokens endpoints
- Token creation returns plaintext once; list never exposes it
- Expired and revoked tokens are rejected
- Tests for creation, listing, deletion, bearer auth, revocation
2026-02-19 20:15:19 -08:00
..
api_test.go refactor: switch API from token auth to cookie-based session auth 2026-02-16 00:31:10 -08:00
api_token_test.go feat: add API token authentication (closes #87) 2026-02-19 20:15:19 -08:00
api_tokens.go feat: add API token authentication (closes #87) 2026-02-19 20:15:19 -08:00
api.go refactor: switch API from token auth to cookie-based session auth 2026-02-16 00:31:10 -08:00
app_name_validation_test.go Add server-side app name validation (closes #37) 2026-02-15 22:06:08 -08:00
app_name_validation.go Add server-side app name validation (closes #37) 2026-02-15 22:06:08 -08:00
app.go Merge branch 'main' into feature/edit-config-entities 2026-02-16 09:28:30 +01:00
auth.go fix: buffer template execution to prevent corrupt HTML responses (closes #42) 2026-02-15 22:04:09 -08:00
dashboard.go fix: buffer template execution to prevent corrupt HTML responses (closes #42) 2026-02-15 22:04:09 -08:00
handlers_test.go feat: add API token authentication (closes #87) 2026-02-19 20:15:19 -08:00
handlers.go fix: buffer template execution to prevent corrupt HTML responses (closes #42) 2026-02-15 22:04:09 -08:00
healthcheck.go Initial commit with server startup infrastructure 2025-12-29 15:46:03 +07:00
port_validation_test.go fix: resolve all golangci-lint issues 2026-02-15 21:55:24 -08:00
render_template_test.go fix: buffer template execution to prevent corrupt HTML responses (closes #42) 2026-02-15 22:04:09 -08:00
setup.go fix: buffer template execution to prevent corrupt HTML responses (closes #42) 2026-02-15 22:04:09 -08:00
tail_validation_test.go refactor: export SanitizeTail and DefaultLogTail directly instead of wrapping 2026-02-15 22:14:12 -08:00
volume_validation_test.go feat: edit existing env vars, labels, and volume mounts 2026-02-16 00:26:07 -08:00
webhook.go fix: limit webhook request body size to 1MB to prevent DoS (closes #1) 2026-02-08 12:02:06 -08:00