clawbot dde0ad5250 feat: add API token authentication (closes #87) ... - Add api_tokens table migration (007) - Add APIToken model with CRUD operations - Generate tokens with upaas_ prefix + 32 hex chars - Store SHA-256 hash of tokens (not plaintext) - Update APISessionAuth middleware to check Bearer tokens - Add POST/GET/DELETE /api/v1/tokens endpoints - Token creation returns plaintext once; list never exposes it - Expired and revoked tokens are rejected - Tests for creation, listing, deletion, bearer auth, revocation		2026-02-19 13:47:39 -08:00
..
routes.go	feat: add API token authentication (closes #87)	2026-02-19 13:47:39 -08:00
server.go	Initial commit with server startup infrastructure	2025-12-29 15:46:03 +07:00