Skip to content

[Feature]: allow resetting a users API-key #838

@hseeberger

Description

@hseeberger

Describe the feature

A user should be able to reset their api-key, this is important functionality to have in case users leak their key. This should generate a new api-key and persist it in the users table.

Questions

  • A JWT will be cached with the api-key or a cookie sid as the key for 10 minutes, should we also clear this? Can we?
  • Should this only be possible through the console?

Tasks

  • Add a new reset endpoint to auth
  • Update gateway to forward reset requests to auth
  • Clean the cache in gateway
  • Add a subcommand to the cli

Suggestion or Example of how the feature would be used

No response

Duplicate declaration

  • I have searched the issues and this feature has not been requested before.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions