upaas/internal/models
user 9ac1d25788 refactor: switch API from token auth to cookie-based session auth
- Remove API token system entirely (model, migration, middleware)
- Add migration 007 to drop api_tokens table
- Add POST /api/v1/login endpoint for JSON credential auth
- API routes now use session cookies (same as web UI)
- Remove /api/v1/tokens endpoint
- HandleAPIWhoAmI uses session auth instead of token context
- APISessionAuth middleware returns JSON 401 instead of redirect
- Update all API tests to use cookie-based authentication

Addresses review comment on PR #74.
2026-02-16 00:31:10 -08:00
..
app.go fix: use hashed webhook secrets for constant-time comparison 2026-02-15 14:06:53 -08:00
deployment.go fix: cancel in-progress deploy when webhook triggers new deploy (closes #38) 2026-02-15 22:12:03 -08:00
env_var.go Initial commit with server startup infrastructure 2025-12-29 15:46:03 +07:00
label.go Initial commit with server startup infrastructure 2025-12-29 15:46:03 +07:00
models_test.go fix: use hashed webhook secrets for constant-time comparison 2026-02-15 14:06:53 -08:00
port.go Add TCP/UDP port mapping support 2025-12-30 12:11:57 +07:00
user.go fix: address noinlineerr lint warning 2026-02-15 21:43:00 -08:00
volume.go Initial commit with server startup infrastructure 2025-12-29 15:46:03 +07:00
webhook_event.go Add commit URL to Slack notifications with link and backtick formatting 2025-12-31 16:29:22 -08:00