Skip to content

Add project scoping for API keys#1041

Merged
saeedvaziry merged 4 commits into4.xfrom
pr/api-key-project-scoping
Mar 11, 2026
Merged

Add project scoping for API keys#1041
saeedvaziry merged 4 commits into4.xfrom
pr/api-key-project-scoping

Conversation

@saeedvaziry
Copy link
Member

  • Add project-scoped API keys: tokens can be restricted to specific projects via project:<id> abilities
  • Enforce project scope in CanSeeProjectMiddleware and all API project endpoints (index, show, update, delete)
  • Update API key creation UI with a multi-select for choosing projects (empty = access to all projects)

Fixes #1039

@saeedvaziry saeedvaziry merged commit 8e02885 into 4.x Mar 11, 2026
2 checks passed
@saeedvaziry saeedvaziry deleted the pr/api-key-project-scoping branch March 11, 2026 21:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant