feat(auth): add DB-based token authentication for dashboard-created clients

Add client_tokens table with auto-generated sk-{hex} tokens so clients created in the dashboard get working API keys. Auth flow: DB token lookup first, then env token fallback, then permissive mode. Includes token management CRUD endpoints and copy-once reveal modal in the frontend.
2026-03-02 15:14:12 -05:00
parent 4e53b05126
commit 54c45cbfca
8 changed files with 373 additions and 24 deletions
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1444,10 +1444,12 @@ dependencies = [
 "dotenvy",
 "futures",
 "headers",
+ "hex",
 "image",
 "insta",
 "mime",
 "mockito",
+ "rand 0.9.2",
 "reqwest",
 "reqwest-eventsource",
 "serde",