feat: add user API tokens for long-lived auth #14

Merged

blacklight merged 11 commits from feat/api-tokens into main 2026-08-24 00:51:11 +02:00

Conversation 0 Commits 11 Files changed 24 +1493 -114

blacklight commented 2026-08-23 20:17:05 +02:00

Owner

Copy link

• Add /auth/api-tokens endpoints to create, list, and revoke tokens
• Add ApiToken model and migration plus issuance/validation service
• Update auth deps to accept API-token JWTs and track last_used_at
• Add tests and README route entry

Closes: #13

- Add /auth/api-tokens endpoints to create, list, and revoke tokens - Add ApiToken model and migration plus issuance/validation service - Update auth deps to accept API-token JWTs and track last_used_at - Add tests and README route entry Closes: #13

blacklight added 1 commit 2026-08-23 20:17:05 +02:00

feat: add user API tokens for long-lived auth ... 68228e9a0b

- Add /auth/api-tokens endpoints to create, list, and revoke tokens
- Add ApiToken model and migration plus issuance/validation service
- Update auth deps to accept API-token JWTs and track last_used_at
- Add tests and README route entry

blacklight added 2 commits 2026-08-23 22:33:44 +02:00

chore(gitignore): Ignore git worktrees 46339fbdb2

fix: avoid startup hang from sqlite migration lock and overlay timeout ... b114cef0f1

Use NullPool for the SQLite synchronous migration engine so it does not
hold a lock on the database after migrations complete, which was
blocking the async `_sync_settings_overlay` during Tornado startup.

Wrap the settings overlay coroutine in `asyncio.wait_for` with a 10s
ceiling so a stuck database query cannot delay server startup
indefinitely. Keep the explicit `new_event_loop`/`run_until_complete`
pattern instead of `asyncio.run` to avoid unsetting Tornado's current
IOLoop in test contexts.

blacklight added 4 commits 2026-08-23 23:51:26 +02:00

feat(api-tokens): buffer last_used_at in Redis and flush via Celery ... a29175e4d9

- Add TZDateTime to enforce aware timestamps across models
- Track token usage in Redis and flush periodically to DB
- Flush buffered usage on token revocation
- Enhance API token schemas with examples and field descriptions

refactor(migrations): share Alembic existence checks ... b346fe5cdc

- Add migrations utils for table/column/index existence
- Use shared table_exists in api_tokens migration
- Add unit tests for migrations utils

test(coverage): Exclude songhive/migrations from coverage report d34f01f203

refactor(migrations): centralize helpers and reuse sync url conversion ... ebec7f4a9e

- Move ensure_migrated and url helpers into migrations/utils.py
- Export migration helpers from migrations/__init__.py
- Use shared to_sync_url in Alembic env.py

blacklight added 1 commit 2026-08-24 00:06:15 +02:00

fix(migrations): use absolute import for to_sync_url ccdf8c24f7

blacklight added 1 commit 2026-08-24 00:07:15 +02:00

chore(requirements): Remove upper bound for alembic 5e4fe01084

blacklight added 2 commits 2026-08-24 00:44:29 +02:00

chore(ci): exclude pull_request events in Drone ... d9bae7cec3

This prevents the execution of duplicate CI pipelines - one for the push
event and one for the pull_request event. The push event is sufficient.

ci(drone): Update tests step to use Python 3.14 eb9c65f5f5

blacklight merged commit 61f3df61b8 into main 2026-08-24 00:51:11 +02:00

blacklight deleted branch feat/api-tokens 2026-08-24 00:51:11 +02:00

blacklight referenced this pull request from a commit 2026-08-24 00:51:12 +02:00

Merge pull request 'feat: add user API tokens for long-lived auth' (#14) from feat/api-tokens into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

api

API-related changes

  

auth

Authorization and authentication

  

backend

Backend-related tasks

  

bug

Something is not working

  

duplicate

This issue or pull request already exists

  

enhancement

Enhancement over an existing feature

  

federation

ActivityPub federation tasks

  

frontend

Frontend-related tasks

  

help wanted

Need some help

  

invalid

Something is wrong

  

new feature

New feature requests

  

question

More information is needed

  

storage

Media storage tasks

  

stream

Media streaming tasks

  

wontfix

This won't be fixed

No labels

api

auth

backend

bug

duplicate

enhancement

federation

frontend

help wanted

invalid

new feature

question

storage

stream

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

blacklight/songhive!14

No description provided.