Phase 5: API Tokens + Robot Users (CI/CD Upload) #4

New issue

Closed

opened 2026-02-02 19:58:45 +01:00 by qwc · 0 comments

qwc commented

2026-02-02 19:58:45 +01:00

Owner

Token generation (crypto/rand, sha256 hash), Bearer token auth middleware, POST /api/project/{slug}/upload endpoint, admin UI for robot users and tokens, scoped permissions via project_access.

Tests needed:

Unit: token generation, hashing, validation, Bearer header extraction
Integration: create robot → generate token → curl-style upload → docs served
Integration: revoked/expired token returns 401, missing access returns 403

Token generation (crypto/rand, sha256 hash), Bearer token auth middleware, `POST /api/project/{slug}/upload` endpoint, admin UI for robot users and tokens, scoped permissions via project_access. **Tests needed:** - Unit: token generation, hashing, validation, Bearer header extraction - Integration: create robot → generate token → curl-style upload → docs served - Integration: revoked/expired token returns 401, missing access returns 403

qwc closed this issue

2026-02-02 20:09:18 +01:00

qwc referenced this issue

2026-05-18 16:08:45 +02:00

Gate /api/project/{slug}/versions by canViewProject (C-4) #99