clawbot dde0ad5250 feat: add API token authentication (closes #87) ... - Add api_tokens table migration (007) - Add APIToken model with CRUD operations - Generate tokens with upaas_ prefix + 32 hex chars - Store SHA-256 hash of tokens (not plaintext) - Update APISessionAuth middleware to check Bearer tokens - Add POST/GET/DELETE /api/v1/tokens endpoints - Token creation returns plaintext once; list never exposes it - Expired and revoked tokens are rejected - Tests for creation, listing, deletion, bearer auth, revocation		2026-02-19 13:47:39 -08:00
..
001_initial.sql	Initial commit with server startup infrastructure	2025-12-29 15:46:03 +07:00
002_remove_container_id.sql	Use ULID for app IDs and Docker label for container lookup	2025-12-29 16:06:40 +07:00
003_add_ports.sql	Add TCP/UDP port mapping support	2025-12-30 12:11:57 +07:00
004_add_commit_url.sql	Add commit URL to Slack notifications with link and backtick formatting	2025-12-31 16:29:22 -08:00
005_add_webhook_secret_hash.sql	fix: use hashed webhook secrets for constant-time comparison	2026-02-15 14:06:53 -08:00
006_add_previous_image_id.sql	feat: deployment rollback to previous image	2026-02-16 00:23:11 -08:00
007_add_api_tokens.sql	feat: add API token authentication (closes #87)	2026-02-19 13:47:39 -08:00