feat(api-tokens): add scoped API tokens for CI/CD automation (Team Pro) (#220)

Browse Source

Add long-lived API tokens with three permission scopes (read-only,
deploy-only, full-admin) for CI/CD pipelines, scripts, and automation.

- Database: api_tokens table with SHA-256 hashed storage
- Auth: extend middleware to authenticate Bearer API tokens
- Scope enforcement: middleware restricts actions per token scope
- API: CRUD endpoints gated behind Team Pro + admin
- UI: ApiTokensSection in Settings Hub with create/revoke/copy flows
- Docs: new api-tokens.mdx with usage examples and screenshots

...

This commit is contained in:

Anso

2026-03-28 15:37:54 -04:00

committed by GitHub

parent e2da1bf43d

commit 8d8118c963

9 changed files with 573 additions and 3 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

docs/images/api-tokens/api-tokens-overview.png

BIN

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 54 KiB