Arnaud
0062220d8e
New keys can be created as "Full access" (default, unchanged) or "Read-only" — read-only keys can only make GET/HEAD/OPTIONS requests, enforced once in requireSessionOrApiKey (lib/api-auth.ts) rather than in every route, since a route has no way to know a request came from a scoped key without that check. Existing keys default to full access — no behavior change for anyone who doesn't opt in. Also included in this migration: the chat_messages table for the next commit (chat history persistence) — generated together since both touched packages/db/src/schema/users.ts in the same pass. Verified locally: created both a read-only and a full-access key, confirmed GET succeeds and POST 403s on the read-only key, confirmed POST still works on the full-access key, and checked the scope badges render correctly in the real Settings → API Keys UI.
58 lines
1.8 KiB
TypeScript
58 lines
1.8 KiB
TypeScript
import type { Metadata } from "next";
|
|
import { headers } from "next/headers";
|
|
import Link from "next/link";
|
|
import { ExternalLink } from "lucide-react";
|
|
import { auth } from "@/lib/auth/server";
|
|
import { db, apiKeys, eq } from "@epicure/db";
|
|
import { ApiKeysManager } from "@/components/settings/api-keys-manager";
|
|
import { getMessages } from "@/lib/i18n/server";
|
|
|
|
export const metadata: Metadata = {};
|
|
|
|
export default async function ApiKeysPage() {
|
|
const session = await auth.api.getSession({ headers: await headers() });
|
|
if (!session) return null;
|
|
const m = getMessages((session.user as { locale?: string }).locale);
|
|
|
|
const keys = await db
|
|
.select({
|
|
id: apiKeys.id,
|
|
name: apiKeys.name,
|
|
scope: apiKeys.scope,
|
|
lastUsedAt: apiKeys.lastUsedAt,
|
|
createdAt: apiKeys.createdAt,
|
|
})
|
|
.from(apiKeys)
|
|
.where(eq(apiKeys.userId, session.user.id));
|
|
|
|
return (
|
|
<div className="space-y-8">
|
|
<section className="rounded-xl border p-6 space-y-4">
|
|
<div>
|
|
<h2 className="font-semibold text-lg">{m.settings.apiKeysPage.title}</h2>
|
|
<p className="text-sm text-muted-foreground mt-1">
|
|
{m.settings.apiKeysPage.description}
|
|
</p>
|
|
<Link
|
|
href="/docs"
|
|
target="_blank"
|
|
className="inline-flex items-center gap-1 text-sm text-primary hover:underline mt-2"
|
|
>
|
|
<ExternalLink className="h-3.5 w-3.5" />
|
|
{m.settings.apiKeysPage.docsLink}
|
|
</Link>
|
|
</div>
|
|
<ApiKeysManager
|
|
initialKeys={keys.map((k) => ({
|
|
id: k.id,
|
|
name: k.name,
|
|
scope: k.scope,
|
|
lastUsedAt: k.lastUsedAt ? k.lastUsedAt.toISOString() : null,
|
|
createdAt: k.createdAt.toISOString(),
|
|
}))}
|
|
/>
|
|
</section>
|
|
</div>
|
|
);
|
|
}
|