feat: add API key authentication support#2431

Merged

dpgaspar merged 16 commits into

dpgaspar:masterfrom

aminghadersohi:amin/ch99414/api-key-auth

Mar 1, 2026

Commits on Feb 27, 2026

feat: add API key authentication support
aminghadersohi
committed
fix: apply black formatting to API key auth files
aminghadersohi
committed
fix: revert to black 23.10 formatting for decorators.py
aminghadersohi
committed
fix: remove unused imports in test_api_key.py
aminghadersohi
committed
fix: ensure ApiKey permissions are created when update_perms is False
aminghadersohi
committed
feat: add lookup_hash for O(1) key validation, address review feedback
aminghadersohi
committed
style: apply black formatting to models and manager
aminghadersohi
committed
fix: use HMAC for lookup hash to resolve CodeQL alerts
aminghadersohi
committed
fix: remove unused hashlib import, suppress CodeQL false positive
aminghadersohi
committed
fix: use BLAKE2b for lookup hash to resolve CodeQL alerts
aminghadersohi
committed
fix: use scrypt for lookup hash to satisfy CodeQL
aminghadersohi
committed
fix: address PR review - 401 vs 403, public method, OpenAPI spec, docs
aminghadersohi
committed
fix: use black 23.10 formatting for decorators.py to pass CI lint
aminghadersohi
committed
fix: import USERNAME_READONLY in test_api_key to fix lint
aminghadersohi
committed
fix: use no-permission role in 403 test instead of ReadOnly
aminghadersohi
committed
fix: clean up noperms_user in tearDown to prevent test pollution
aminghadersohi
committed