Feat: Implement API key authentication #251

New Issue

MrUnknownDE · 2026-04-05T16:17:11+02:00

MrUnknownDE commented

2026-04-05 16:17:11 +02:00

Originally created by @wayneshn on 9/4/2025

This commit enables API access with an API key system. This change provides a better experience for programmatic access and third-party integrations.

Key changes include:

API Key Management: Users can now generate, manage, and revoke persistent API keys through a new "API Keys" section in the settings UI.
Authentication Middleware: API requests are now authenticated via an X-API-KEY header instead of the previous Authorization: Bearer token.
Backend Implementation: Adds a new api_keys database table, along with corresponding services, controllers, and routes to manage the key lifecycle securely.
Rate Limiting: The API rate limiter now uses the API key to identify and track requests.
Documentation: The API authentication documentation has been updated to reflect the new method.
Replace SUPER_API_KEY with the user-generated key #81

*Originally created by @wayneshn on 9/4/2025* This commit enables API access with an API key system. This change provides a better experience for programmatic access and third-party integrations. Key changes include: - **API Key Management:** Users can now generate, manage, and revoke persistent API keys through a new "API Keys" section in the settings UI. - **Authentication Middleware:** API requests are now authenticated via an `X-API-KEY` header instead of the previous `Authorization: Bearer` token. - **Backend Implementation:** Adds a new `api_keys` database table, along with corresponding services, controllers, and routes to manage the key lifecycle securely. - **Rate Limiting:** The API rate limiter now uses the API key to identify and track requests. - **Documentation:** The API authentication documentation has been updated to reflect the new method. - Replace SUPER_API_KEY with the user-generated key #81

MrUnknownDE closed this issue

2026-04-05 16:17:11 +02:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/OpenArchiver#251