clawbot 7387ba6b5c feat: add API token authentication (closes #87) ...

- Add api_tokens table migration (007)
- Add APIToken model with CRUD operations
- Generate tokens with upaas_ prefix + 32 hex chars
- Store SHA-256 hash of tokens (not plaintext)
- Update APISessionAuth middleware to check Bearer tokens
- Add POST/GET/DELETE /api/v1/tokens endpoints
- Token creation returns plaintext once; list never exposes it
- Expired and revoked tokens are rejected
- Tests for creation, listing, deletion, bearer auth, revocation

2026-02-19 23:43:22 -08:00

..

api_test.go

refactor: switch API from token auth to cookie-based session auth

2026-02-16 00:31:10 -08:00

api_token_test.go

feat: add API token authentication (closes #87)

2026-02-19 23:43:22 -08:00

api_tokens.go

feat: add API token authentication (closes #87)

2026-02-19 23:43:22 -08:00

api.go

refactor: switch API from token auth to cookie-based session auth

2026-02-16 00:31:10 -08:00

app_name_validation_test.go

Add server-side app name validation (closes #37)

2026-02-15 22:06:08 -08:00

app_name_validation.go

Add server-side app name validation (closes #37)

2026-02-15 22:06:08 -08:00

app.go

Revert "Merge pull request 'feat: add Gitea Actions CI for make check (closes #96)' (#98) from feat/ci-make-check into main"

2026-02-19 20:36:22 -08:00

auth.go

fix: buffer template execution to prevent corrupt HTML responses (closes #42)

2026-02-15 22:04:09 -08:00

dashboard.go

fix: buffer template execution to prevent corrupt HTML responses (closes #42)

2026-02-15 22:04:09 -08:00

handlers_test.go

feat: add API token authentication (closes #87)

2026-02-19 23:43:22 -08:00

handlers.go

fix: buffer template execution to prevent corrupt HTML responses (closes #42)

2026-02-15 22:04:09 -08:00

healthcheck.go

Initial commit with server startup infrastructure

2025-12-29 15:46:03 +07:00

port_validation_test.go

fix: resolve all golangci-lint issues

2026-02-15 21:55:24 -08:00

render_template_test.go

fix: buffer template execution to prevent corrupt HTML responses (closes #42)

2026-02-15 22:04:09 -08:00

setup.go

fix: buffer template execution to prevent corrupt HTML responses (closes #42)

2026-02-15 22:04:09 -08:00

tail_validation_test.go

refactor: export SanitizeTail and DefaultLogTail directly instead of wrapping

2026-02-15 22:14:12 -08:00

volume_validation_test.go

feat: edit existing env vars, labels, and volume mounts

2026-02-16 00:26:07 -08:00

webhook.go

fix: limit webhook request body size to 1MB to prevent DoS (closes #1)

2026-02-08 12:02:06 -08:00