Aaron Kimbrell 3f2a9cc5b0
feat(dashboard): scoped API keys with rate limits and quotas ...
Bearer keys (dlk_...) are checked per request against their owner's
current account (ban, lock, demotion, sign out everywhere stop or narrow
them at once) and their scope: permission routes need the permission in
scope, read-only keys only read, level-only routes need an all-permission
key, and session-only paths (sign-in, password, 2FA, key management)
are never reachable with a key. Per-key rate limit and daily quota with
429 and X-RateLimit/X-Quota/Retry-After headers; usage is written in
batches every minute. WebSocket subscriptions honour the scope too.
Routes to list, make, rotate and revoke keys; staff with
api_keys_manage can see and revoke others' keys under the rank rules.
POST /api/auth/token now makes an all-permission key. Audit entries for
create/rotate/revoke/denied, and actions done with a key are attributed
to "user (key name)".
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-09-28 22:31:03 -05:00
2026-09-28 22:30:50 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:50 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:31:03 -05:00
2026-09-28 22:31:03 -05:00
2026-09-28 22:31:03 -05:00
2026-09-28 22:30:52 -05:00
2026-09-28 22:31:03 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:47 -05:00
2026-09-28 22:30:47 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:55 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:50 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:59 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:31:03 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:31:03 -05:00
2026-09-28 22:30:51 -05:00
2026-09-28 22:31:03 -05:00
2026-09-28 22:30:52 -05:00
2026-09-28 22:30:52 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:31:03 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:31:02 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:47 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:31:03 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:31:03 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:50 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:50 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:47 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:31:03 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:31:02 -05:00
2026-09-28 22:30:50 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:50 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:51 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:50 -05:00
2026-09-28 22:30:50 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:31:03 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:52 -05:00
2026-09-28 22:30:52 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:51 -05:00
2026-09-28 22:30:51 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:31:03 -05:00
2026-09-28 22:31:03 -05:00
2026-09-28 22:30:57 -05:00
2026-09-28 22:30:51 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:31:03 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:31:03 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:51 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:31:02 -05:00
2026-09-28 22:31:02 -05:00
2026-09-28 22:31:02 -05:00
2026-09-28 22:31:02 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:57 -05:00
2026-09-28 22:30:57 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:50 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:48 -05:00
2026-09-28 22:30:48 -05:00
2026-09-28 22:30:51 -05:00
2026-09-28 22:30:51 -05:00
2026-09-28 22:30:55 -05:00
2026-09-28 22:30:51 -05:00
2026-09-28 22:30:51 -05:00
2026-09-28 22:31:03 -05:00
2026-09-28 22:30:43 -05:00
2026-09-28 22:30:43 -05:00
3f2a9cc5b0