FEATURE: Overhaul of admin API key system (#8284)

- Allow revoking keys without deleting them
- Auto-revoke keys after a period of no use (default 6 months)
- Allow multiple keys per user
- Allow attaching a description to each key, for easier auditing
- Log changes to keys in the staff action log
- Move all key management to one place, and improve the UI
This commit is contained in:
David Taylor
2019-11-05 14:10:23 +00:00
committed by GitHub
parent fa2c06da93
commit 52c5cf33f8
46 changed files with 863 additions and 395 deletions

View File

@@ -0,0 +1,14 @@
# frozen_string_literal: true
module Jobs
class CleanUpUnusedApiKeys < ::Jobs::Scheduled
every 1.day
def execute(args)
ApiKey.revoke_unused_keys!
end
end
end