- Add api_tokens table migration (007) - Add APIToken model with CRUD operations - Generate tokens with upaas_ prefix + 32 hex chars - Store SHA-256 hash of tokens (not plaintext) - Update APISessionAuth middleware to check Bearer tokens - Add POST/GET/DELETE /api/v1/tokens endpoints - Token creation returns plaintext once; list never exposes it - Expired and revoked tokens are rejected - Tests for creation, listing, deletion, bearer auth, revocation |
||
|---|---|---|
| .. | ||
| api_token.go | ||
| app.go | ||
| deployment.go | ||
| env_var.go | ||
| label.go | ||
| models_test.go | ||
| port.go | ||
| user.go | ||
| volume.go | ||
| webhook_event.go | ||