2 Commits

Author	SHA1	Message	Date
Vantz Stockwell	5b323137e0	feat(auth): API-key authentication — corr_ bearer key acts as license owner ... Closes the 'Public REST API' last mile: external callers authenticate with a per-license API key instead of a JWT. Additive and zero-regression: - JwtAuthGuard: a corr_-prefixed bearer token (or X-API-Key header) is validated via ApiKeysService.validateKey and sets request.user shaped like a JWT user, scoped to the key's license. JWTs are eyJ... and never collide with the corr_ prefix, so the existing JWT path is byte-for-byte unchanged. - API-key calls act AS the license owner: validateKey now resolves license.owner_user_id so sub is a real UUID — any @CurrentUser/created_by FK insert works and attributes correctly. (ApiKeysModule gains the License repo.) - PermissionsGuard: is_api_key principals get full access to their own license (always tenant-scoped). Future: scoped/read-only keys. Backend tsc green. Untested at runtime (no local DB) — needs a curl smoke test on Saturday's fresh stack before the roadmap item flips to shipped. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-12 02:26:59 -04:00
Vantz Stockwell	55c9893131	feat(api): per-license API key management + roadmap sync ... API keys (roadmap: 'API key management per license'): - migration 023_api_keys; ApiKey entity; ApiKeysModule (@Global, exports ApiKeysService) wired into app.module. - Service: create (corr_<prefix>_<secret>, returns plaintext once, stores sha256 hash + prefix), list (no hash), revoke, and validateKey(rawKey) -> { license_id } for a future API-key auth guard. Controller license-scoped + RBAC (apikeys.view/manage). Roadmap: moved the shipped multi-game items (multi-instance host runtime, per-game wipe + event scheduling) into a 'Phase 2 — Multi-game runtime' shipped group; Dune/Conan/Soulmask Formulae stay in-progress. Backend tsc + frontend build green. Migration applies on a fresh DB (Saturday host). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-12 02:04:41 -04:00