32348bebce
- Migration 082: api_keys table (user_id, name, prefix, hashed_key, scopes, last_used_at, expires_at) - APIKey model, APIKeyService (Create, List, Delete, ValidateAPIKey) - APIKeyHandler: GET/POST/DELETE /api/v1/developer/api-keys - AuthMiddleware: X-API-Key and Bearer vza_* accepted as alternative to JWT - CSRF: skip for API key auth (stateless) - Key format: vza_ prefix, SHA-256 hashed storage
35 lines
1 KiB
Go
35 lines
1 KiB
Go
package models
|
|
|
|
import (
|
|
"time"
|
|
|
|
"github.com/google/uuid"
|
|
"github.com/lib/pq"
|
|
"gorm.io/gorm"
|
|
)
|
|
|
|
// APIKey represents a user API key for developer portal (v0.102 Lot C)
|
|
type APIKey struct {
|
|
ID uuid.UUID `gorm:"type:uuid;primaryKey" json:"id"`
|
|
UserID uuid.UUID `gorm:"type:uuid;not null;index" json:"user_id"`
|
|
Name string `gorm:"size:100;not null" json:"name"`
|
|
Prefix string `gorm:"size:16;not null;index" json:"prefix"`
|
|
HashedKey string `gorm:"size:128;not null" json:"-"` // Never expose
|
|
Scopes pq.StringArray `gorm:"type:text[]" json:"scopes"`
|
|
LastUsedAt *time.Time `json:"last_used_at,omitempty"`
|
|
ExpiresAt *time.Time `json:"expires_at,omitempty"`
|
|
CreatedAt time.Time `json:"created_at"`
|
|
}
|
|
|
|
// TableName defines the table name for GORM
|
|
func (APIKey) TableName() string {
|
|
return "api_keys"
|
|
}
|
|
|
|
// BeforeCreate GORM hook to generate UUID if not set
|
|
func (k *APIKey) BeforeCreate(tx *gorm.DB) error {
|
|
if k.ID == uuid.Nil {
|
|
k.ID = uuid.New()
|
|
}
|
|
return nil
|
|
}
|