FEATURE: Overhaul of admin API key system (#8284)

- Allow revoking keys without deleting them
- Auto-revoke keys after a period of no use (default 6 months)
- Allow multiple keys per user
- Allow attaching a description to each key, for easier auditing
- Log changes to keys in the staff action log
- Move all key management to one place, and improve the UI
This commit is contained in:
David Taylor
2019-11-05 14:10:23 +00:00
committed by GitHub
parent fa2c06da93
commit 52c5cf33f8
46 changed files with 863 additions and 395 deletions

View File

@@ -4,8 +4,11 @@ class ApiKeySerializer < ApplicationSerializer
attributes :id,
:key,
:description,
:last_used_at,
:created_at
:created_at,
:updated_at,
:revoked_at
has_one :user, serializer: BasicUserSerializer, embed: :objects