pikasTech-HWLAB

T

Codex 13c779ed11 feat(cloud-api): v0.2 user API key auth (api_keys table + Bearer hwl_live_)

Adds the user API key foundation called out in #788:

- New api_keys table with idx_api_keys_user and idx_api_keys_prefix
- users extended with auth_provider/keycloak_issuer/keycloak_sub/email/last_login_at
- Authorization: Bearer hwl_live_... resolves to the same AuthPrincipal
- /v1/api-keys, /v1/api-keys/default, /v1/api-keys/{id}/regenerate, DELETE /v1/api-keys/{id}
- First-admin and /auth/login bootstrap a Default API key
- Short-test mode keeps display_secret; production化 will switch to hash-only later
- Legacy HWLAB_DEVICE_POD_API_KEY and Bearer <session-token> paths preserved
- 4 new access-control.test.ts cases

Refs pikasTech/HWLAB#788

2026-06-04 15:01:30 +08:00

cmd

fix(v0.2): device-pod output.text evidence read-only selectors for #773

2026-06-03 21:57:39 +08:00

deploy

fix: replace device pod lease with api key

2026-06-02 18:11:32 +08:00

docs/reference

fix: unify v02 browser launcher

2026-06-04 14:51:54 +08:00

fixtures

fix: make hwlab cli a short web client