Closes #20210: Implement new version of API token #1151

New Issue

MrUnknownDE · 2026-04-05T21:09:41+02:00

MrUnknownDE commented

2026-04-05 21:09:41 +02:00

Originally created by @jeremystretch on 10/2/2025

Closes: #20210

Extend the Token model
- Rename key to plaintext (used only for v1 tokens)
- Add an integer field version to denote v1/v2 tokens
- Add key, pepper_id, and hmac_digest fields to store v2 token attributes
Introduce the API_TOKEN_PEPPERS configuration parameter
Extend TokenAuthentication to recognize both token versions and to validate v2 tokens
Introduce the get_current_pepper() utility function to retrieve the most recent pepper
Simplify the token.html template for the account view
Adapt all test suites to use v2 API tokens by default
Update the documentation

*Originally created by @jeremystretch on 10/2/2025* ### Closes: #20210 - Extend the Token model - Rename `key` to `plaintext` (used only for v1 tokens) - Add an integer field `version` to denote v1/v2 tokens - Add `key`, `pepper_id`, and `hmac_digest` fields to store v2 token attributes - Introduce the `API_TOKEN_PEPPERS` configuration parameter - Extend `TokenAuthentication` to recognize both token versions and to validate v2 tokens - Introduce the `get_current_pepper()` utility function to retrieve the most recent pepper - Simplify the `token.html` template for the account view - Adapt all test suites to use v2 API tokens by default - Update the documentation

MrUnknownDE closed this issue

2026-04-05 21:09:41 +02:00

Sign in to join this conversation.

Branches Tags

main

21455-sql-indexes-audit

21357-register-model-actions

feature

20924-plugin-ui-components

21766-improve-test-coverage-for-sortable-table-columns

21157-export-template-public-models

21025-pre-render-config-contexts

21364-swagger

feature-ip-prefix-link

20911-dropdown-3

fix_module_substitution

21160-filterset

20911-dropdown-2

20044-elevation-stuck-lightmode

7604-filter-modifiers-v3

20660-script-load

19724-graphql

14884-script

19720-macaddress-interface-generic-relation

fix-19669-api-image-download

7604-filter-modifiers

19275-fixes-interface-bulk-edit

fix-17794-get_field_value_return_list

11507-show-aggregate-and-rir-on-api

9583-add_column_specific_search_field_to_tables

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/netbox#1151