feat(security): Phase 7c — app-side API-Key authentication with 3-scope keys + rate-limit + admin UI#88

Open

strausmann wants to merge 21 commits into

mainfrom

feat/phase-7c-api-auth

Commits on May 17, 2026

docs(phase-7c): add spec + TDD implementation plan for API-Key auth
strausmann
committed
feat(security): Phase 7c Step 1 — ApiKey model, migration, and repository
strausmann
committed
feat(security): Phase 7c Step 2 — key generation + bcrypt verify + LRU cache
strausmann
committed
feat(security): Phase 7c Step 3 — require_scope() FastAPI dependency + AuthContext
strausmann
committed
feat(security): Phase 7c Step 4 — wire require_scope into all routes
strausmann
committed
feat(security): Phase 7c Step 5 — in-memory token-bucket rate limiter
strausmann
committed
feat(security): Phase 7c Step 6 — per-key printer ACL check
strausmann
committed
feat(security): Phase 7c Step 7 — audit trail on jobs (api_key_id + source_ip)
strausmann
committed
feat(security): Phase 7c Step 8 — backend CRUD API for /api/admin/api-keys
strausmann
committed
feat(ui): Phase 7c Step 9 — frontend HTMX /admin/api-keys UI
strausmann
committed
feat(security): Phase 7c Step 10 — final integration + production-readiness
strausmann
committed

Commits on May 18, 2026